Microsoft Intune · Cloud PC (Windows 365)
Cloud PC Reader
Has Read access to all Cloud PC features. Cannot make changes. Requires Windows 365 subscription.
Scope: Read-only Windows 365 Cloud PC access
Permissions
- Cloud PC - Read access to all features
- Provisioning policies - View only
- User settings - View only
- Network settings - View only
- Device images - View only
- Cloud PC status - View health and connectivity
Common use cases
- Auditing Cloud PC configuration
- Viewing Cloud PC health and status
- Reporting on Cloud PC usage
- Monitoring without change capability
Best practices
- Use for audit and oversight roles
- Assign to stakeholders needing visibility only
- Combine with other read-only roles for broader access
Common questions
When should I assign the Cloud PC Reader role?
Assign Cloud PC Reader when you need to: Auditing Cloud PC configuration; Viewing Cloud PC health and status; Reporting on Cloud PC usage; and Monitoring without change capability. It is part of Microsoft Intune and should be granted as a least-privilege alternative to broader roles like Global Administrator.
What can someone with the Cloud PC Reader role do?
The Cloud PC Reader role grants permissions including: Cloud PC - Read access to all features; Provisioning policies - View only; User settings - View only; Network settings - View only; Device images - View only; and Cloud PC status - View health and connectivity. See the Permissions section above for the full list.