Microsoft Intune Modern Management Microsoft Intune Administration & Engineering Windows Modern Device Management Device Enrollment & Compliance Configuration Profiles Settings Catalog Endpoint Security Profiles Device Restrictions Compliance Policies Company Portal Intune RBAC (via Alice) Windows Provisioning & Updates Windows Autopilot Autopilot Pre-Provisioning Windows Update for Business Windows Autopatch Feature Update Policies Quality Update Policies Driver Update Management Delivery Optimization Infrastructure Build Client Environment Ownership Device Product-Line Governance (Modern Office Device, SW Developer Device, PAW, DevBoxes, GEW Basic) AIM (Intune Automation Management) - policy-as-code configuration Alice (IAM / RBAC Governance Tool) - RBAC change ownership Vanilla Image / OEM Factory Coordination Identity & Security Microsoft Entra ID Entra Join / Hybrid Join Conditional Access MFA Awareness BitLocker Management Microsoft Defender for Endpoint Policies Attack Surface Reduction Endpoint Hardening Zero Trust Concepts Endpoint Privilege Management (EPM) Application & Automation Win32 App Packaging for Intune Microsoft Store App Deployment Microsoft 365 Apps Deployment PowerShell Scripting Microsoft Graph API Intune Automation Power BI / Reporting KPI Definition & Measurement Design ITSM & Governance ServiceNow or equivalent ITSM tool Incident Management Problem Management Change Management Knowledge Management SLA / KPI Reporting Audit Evidence Support. Device Product-Line & Persona Governance Own the differentiated configuration profile sets, security baselines, and app sets for each managed device Product Line: Modern Office Device (global reference baseline), SW Developer Device (Engineering PO, adjusted network/admin-rights posture), Privileged Access Workstation / PAW (hardened AVD clean image, reduced app set, App-Locker policy, privileged-role-only access), DevBoxes (Developer Platform team), and GEW Basic (Engineering AVD, ITT/XE PO).