iPadOS App Configuration Policies via Intune/Microsoft Endpoint Manager

[Garacesh]

I have a device here that's now supervised, enrolled into Intune/Endpoint Manager.

 

It's got the configuration profiles on that mandate it downloads Sign In App from it, and runs it in Kiosk mode. All is well.

 

Except Sign In App can't use the camera, because it doesn't have the permissions to, but because the device is in Kiosk mode I'm unable to grant it them.

Sure, I could just take the profile off the iPad, do it manually, and re-add it, but I'm trying to make things as light-touch as possible.

 

I've found Intune/Endpoint Manager's App Configuration Policies section, and created a new policy, platform iOS/iPadOS; targeted app Sign In App Visitor Management; and assigned to the same device group that does the Sign In App stuff

This policy has allowCamera and allowBluetoothModification* both set as boolean/true.

 

I found allowCamera and allowBluetoothModifcation in this Apple dev document, but I have a nagging suspicion that this is the wrong document and it's instead talking about OS restrictions.

And now the policy's Device install status has been sat at 'Pending' for over two hours.

 

Anybody able to confirm that I've done this right or wrong (and hopefully point me in the right direction if it's the latter!)

 

* There's a badge/label printer connected via bluetooth

 

 

 

Edit: Bugger

Both devices now have Status: Succeeded and a nice big green tick, and yet Sign In App still complains Privacy options have blocked access to the camera, even after a reboot.

Edited January 11, 2023 by Garacesh