Microsoft Intune · Cloud PC (Windows 365)
Cloud PC Administrator
Has Read and Write access to all Cloud PC features located within the Cloud PC area. Requires Windows 365 subscription.
Scope: Windows 365 Cloud PC management
Permissions
- Cloud PC - Full Read and Write access
- Provisioning policies - Create, modify, delete, assign
- User settings - Configure Cloud PC user experience
- Network settings - Manage Azure network connections
- Device images - Manage custom images
- Cloud PC management - Reprovision, resize, restart
Common use cases
- Setting up Windows 365 for the organization
- Creating provisioning policies
- Managing Cloud PC lifecycle
- Configuring user and network settings
Best practices
- Assign to Cloud PC operations team
- Combine with network admin for Azure integration
- Use provisioning policies for standardized deployments
- Monitor Cloud PC health and performance
Security considerations
- Can provision Cloud PCs to any user
- Can resize (upgrade/downgrade) Cloud PCs
- Can reprovision (reset) Cloud PCs
Common questions
When should I assign the Cloud PC Administrator role?
Assign Cloud PC Administrator when you need to: Setting up Windows 365 for the organization; Creating provisioning policies; Managing Cloud PC lifecycle; and Configuring user and network settings. It is part of Microsoft Intune and should be granted as a least-privilege alternative to broader roles like Global Administrator.
What can someone with the Cloud PC Administrator role do?
The Cloud PC Administrator role grants permissions including: Cloud PC - Full Read and Write access; Provisioning policies - Create, modify, delete, assign; User settings - Configure Cloud PC user experience; Network settings - Manage Azure network connections; Device images - Manage custom images; and Cloud PC management - Reprovision, resize, restart. See the Permissions section above for the full list.
What are the security risks of the Cloud PC Administrator role?
Key considerations when assigning Cloud PC Administrator: Can provision Cloud PCs to any user; Can resize (upgrade/downgrade) Cloud PCs; and Can reprovision (reset) Cloud PCs. Review the Security considerations section before assignment, and pair with Privileged Identity Management (PIM) for just-in-time access where possible.