Enabling a device

Manny Agahi 0 Reputation points
2026-11-06T15:50:11.21+00:00

I am the admin for my organization but i cant enable a device that i disabled

Microsoft Security | Microsoft Entra | Microsoft Entra ID

1 answer

Sort by: Most helpful
  1. Vasil Michev 128.7K Reputation points MVP Volunteer Moderator
    2026-11-07T07:25:53.6733333+00:00

    Can you try performing the operation via the Graph SDK for PowerShell? Here's an example:

    Connect-MgGraph -Scopes Directory.AccessAsUser.All
    Update-MgDevice -DeviceId xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx -AccountEnabled:$true
    

    Unfortunately, the permissions required for this operation are a bit excessive, you not only need a valid directory role, but also the blanket/impersonation Directory.AccessAsUser.All. Speaking of roles, as mentioned in the documentation:

    In delegated scenarios with work or school accounts, the signed-in user must be assigned a supported Microsoft Entra role or a custom role with a supported role permission. Intune Administrator is the least privileged role supported for this operation. A calling user in the Cloud Device Administrator role can only enable or disable devices and a user with the Windows 365 Administrator role can only update basic device properties.

    Was this answer helpful?

    0 comments No comments

Your answer

Answers can be marked as 'Accepted' by the question author and 'Recommended' by moderators, which helps users know the answer solved the author's problem.