Note
Access to this page requires authorization. You can try signing in or changing directories.
Access to this page requires authorization. You can try changing directories.
Customers can purchase devices from resellers, distributors, or other partners. If these resellers, distributors, and partners are part of the Cloud Solution Partners (CSP) program, they can register devices for the customer.
As with manufacturers, CSP partners must be granted permission to register devices for an organization. This process is described in the CSP authorization section of the Windows Autopilot customer consent article. In summary:
- The CSP partner requests a relationship with the organization. That organization's Global Administrator approves the request.
- After the approval, CSP partners add devices by using Partner Center, either directly through the website or by using available APIs that can automate the same tasks.
For Surface devices, Microsoft Support can help with device registration. For more information, see Surface Registration Support for Windows Autopilot.
Windows Autopilot doesn't require delegated administrator permissions when it establishes the relationship between the CSP partner and the organization. As part of the Global Administrator's approval process, they can choose to unselect Include delegated administration permissions.
Important
The Microsoft Entra Global Administrator role is a highly privileged role that should only be used when another role can't be used. This feature requires the Global Administrator role. For other features, Microsoft recommends using roles with the fewest permissions.
Tip
While resellers, distributors, or partners could boot each new Windows device to get the hardware hash so they can provide it to customers or register the device directly, we don't recommend this method. Instead, register devices by using the PKID information from the device packaging, such as the barcode, or get it electronically from the manufacturer or upstream partner or distributor.
Note
Partner Center doesn't have access to profiles you create in Intune or Microsoft Store for Business. It only has access to the Windows Autopilot profiles you create through Partner Center.