---
title: Intune – Additional permissions for the Endpoint Security Manager role - cubesys
description: As you know, you can delegate permissions to allow certain administrative or management tasks using RBAC (Role Based Access Control) on Intune/Endpoint Configuration Manager.Well, new permissions have been added to the Endpoint Security Manager role:Initiate Configuration Manager actionMicrosoft Defender ATPReboot nowRemote lockRotate BitLockerKeys (preview)Rotate FileVault keyShut downSync devicesIf you are…
---

[Latest News & Blogs - cubesys ](https://www.cubesys.com.au/blog)

# [Intune – Additional permissions for the Endpoint Security Manager role - cubesys](https://www.cubesys.com.au/blog/intune-additional-permissions-for-the-endpoint-security-manager-role)

 Written by [cubesys](https://www.cubesys.com.au/blog/author/cubesys) | Sep 20, 2020 2:00:00 PM

As you know, you can delegate permissions to allow certain administrative or management tasks using RBAC (Role Based Access Control) on Intune/Endpoint Configuration Manager.

Well, new permissions have been added to the **Endpoint Security Manager** role:

- Initiate Configuration Manager action
- Microsoft Defender ATP
- Reboot now
- Remote lock
- Rotate BitLockerKeys (preview)
- Rotate FileVault key
- Shut down
- Sync devices

If you are using the built-in Endpoint Security Manager role, you have nothing to do, except maybe some communication to the delegates.

If you are using custom role to delegate permissions, you may have to update your custom role to reflect these new permissions.

<https://www.cubesys.com.au/hubfs/Imported_Blog_Media/image_thumb-293.png>

[View full post](https://www.cubesys.com.au/blog/intune-additional-permissions-for-the-endpoint-security-manager-role)

```json
{
  "@context" : "http://schema.org",
  "@type" : "BlogPosting",
  "author" : {
    "@type" : "Person",
    "name" : "cubesys"
  },
  "dateModified" : "2025-02-21T16:09:38.565Z",
  "datePublished" : "2020-09-20T14:00:00Z",
  "headline" : "Intune – Additional permissions for the Endpoint Security Manager role",
  "image" : {
    "@type" : "ImageObject",
    "height" : 60,
    "url" : "/hs/hsstatic/content_shared_assets/static-1.4092/img/default-amp-logo.png",
    "width" : 60
  },
  "mainEntityOfPage" : "https://www.cubesys.com.au/blog/intune-additional-permissions-for-the-endpoint-security-manager-role",
  "publisher" : {
    "@type" : "Organization",
    "logo" : {
      "@type" : "ImageObject",
      "height" : 60,
      "url" : "/hs/hsstatic/content_shared_assets/static-1.4092/img/default-amp-logo.png",
      "width" : 60
    },
    "name" : "Latest News"
  }
}
```