The purpose of this blog post is to inform you how to configure RBAC for Intune in a secure way via Role-assignable groups. So, the RBAC groups can only be populated by a Global administrator or Privileged role administrator.

This knowledgebase item is to help you out to enable the Intune portal for unlicensed administrators for tenants created before 2006 release.