Exam MD-102 topic 1 question 348 discussion

Correct answers: Remote Help Help Desk Operator Help Desk Operator permissions: Ref: https://learn.microsoft.com/en-us/mem/intune/fundamentals/role-based-access-control-reference#:~:text=Read-,Remote%20Help%20app,View%20screen,-Remote%20tasks Endpoint Privilege Management (EPM) assigned to standard users. And the question is ask to give permissions to Administrator "Administrators must have elevated access to perform remote tasks on a user’s device." Ref: https://learn.microsoft.com/en-us/mem/intune/protect/epm-overview#:~:text=With%20Microsoft%20Intune%20Endpoint,running%20certain%20Windows%20diagnostics.

For elevated access you should use "Help Desk Operator." Endpoint Privilege Manager doesnt follow the principle of least privilege in this case. You can use Help Desk Operator for the required elevated access

For the connection, use: Remote Help For elevated access, use: Endpoint Privilege Manager Explanation: 1. Remote Help: This option provides a secure connection over a shared screen session, allowing administrators to remotely assist users with their devices. It is integrated with Microsoft Intune, ensuring that the connection is secure and managed within the organization's policies. 2. Endpoint Privilege Manager: This option ensures that administrators have elevated access to perform remote tasks on a user's device. It follows the principle of least privilege by granting administrators the necessary permissions only when needed and for the duration of the task, minimizing the risk of misuse of elevated privileges. By using Remote Help in combination with Endpoint Privilege Manager, you can securely manage remote tasks on user devices while adhering to security best practices and minimizing reliance on on-premises infrastructure.

"HelpDesk Operator" can provide "Remote Help" using tools like Microsoft Intune https://learn.microsoft.com/en-us/mem/intune/fundamentals/remote-help