Others

Fix Intune Change Primary User Option Grayed Out

Maira Mehtab Sep 22, 2026 868 views

Question details

The administrator needs to update the primary user for a device in Microsoft Intune, but the required option is disabled despite having administrative permissions.

Product: Microsoft Intune
Device & OS: not provided
Scenario: Managing user device assignments and configurations in the Microsoft Intune admin center
Observed behavior: The 'Change primary user' option is grayed out and unavailable to be clicked.

Before you start

Ensure you are logged into the Microsoft Intune Admin Center with at least Intune Service Administrator privileges and that the target device is currently active and fully enrolled.

Solution 1Recommended

Verify Device Properties and Administrator Permissions

Check device ownership, the initial enrollment method, and specific role permissions, as certain configurations restrict changing the primary user.

Microsoft Intune restricts the ability to change the primary user based on how the device was enrolled and its ownership status. Personal devices and certain co-managed setups often disable this feature to prevent unauthorized assignment changes.

Check device ownership status

Navigate to the Microsoft Intune Admin Center, go to Devices > All devices, and select the affected device. Under the Hardware tab, ensure the Ownership is set to 'Corporate', as personal devices may restrict user changes.

Verify the enrollment method

In the same device overview, check how the device was enrolled. Devices enrolled via Windows Autopilot or Azure AD Join support primary user changes, whereas devices enrolled using Device Enrollment Manager (DEM) accounts or certain co-management states might not.

Confirm specific role permissions

Go to Tenant administration > Roles. Verify that your assigned administrator role explicitly includes the 'Managed Device - Set primary user' permission, as standard Microsoft 365 permissions may not automatically grant this granular right.

Shared Devices: If the device is configured as a shared device (without user affinity), it will not have a primary user, and the option to change it will remain grayed out by design.

Solution 2

Consult the Microsoft Intune Tech Community

If all prerequisites are met but the option remains disabled, escalate the device-specific issue to specialized Intune administrators.

Free Microsoft Office alternative

Experience a Lightweight Alternative to Microsoft Office

While troubleshooting complex Microsoft 365 and Intune device management policies, you might be looking for a more streamlined, cost-effective office suite for your unmanaged or personal devices. WPS Office is a powerful, free alternative that offers seamless functionality without heavy administrative overhead.

1. Download the installer: Visit the official WPS Office website and download the free version tailored for your operating system (Windows, Mac, or Linux).
2. Install the application: Run the setup file and follow the quick, straightforward installation prompts without needing complex Intune package deployment.
3. Open your documents: Launch WPS Office and immediately open, edit, and save your existing Microsoft Word, Excel, and PowerPoint files flawlessly.

Highly compatible with Microsoft Office formats including DOCX, XLSX, and PPTXLightweight installation with minimal system requirements for any deviceFree to use with a familiar, user-friendly interface to ensure zero learning curveBuilt-in PDF editing, conversion, and signing toolsReduces the need for complex enterprise device and license management

microsoft office alternative - wps office

Frequently Asked Questions

Why can't I change the primary user on a Windows device in Intune?

The option may be grayed out if the device was enrolled as a personal device, if it is a shared device without user affinity, or if your specific administrator role lacks the 'Set primary user' permission in Intune.

Does changing the primary user in Intune change the local device administrator?

No. Changing the primary user in Microsoft Intune updates the Azure AD device record for application targeting and licensing purposes, but it does not automatically add or remove local administrator rights on the physical device.

Can I change the primary user for iOS or macOS devices in Intune?

Yes, for Apple devices enrolled via Automated Device Enrollment (ADE) with user affinity, you can change the primary user as long as the device ownership is explicitly set to corporate.

Office Quick Solutions