In this comprehensive article, I will walk you through the professional steps for adding and managing devices within the Microsoft Entra admin center.
How To Add Device In Microsoft Entra Admin Center
When a device is added to Microsoft Entra, it allows you to:
- Enforce Conditional Access: Ensure only “Compliant” devices can access Outlook or SharePoint.
- Enable Single Sign-On (SSO): Users sign in once to the device and get seamless access to all corporate apps.
- Simplify Remote Work: Perfect for the modern hybrid workforce in hubs .
Understanding the Three Types of Device Identities
Before we jump into the admin center, we must clarify how a device is added. In Microsoft Entra, “adding” a device isn’t always a manual upload by an admin; it’s often a registration triggered by the user or an automated system.
1. Entra Registered Devices
Typically used for Bring Your Own Device (BYOD) scenarios. These are personal devices (Windows, iOS, Android, macOS) used by employees to access corporate resources.
- Ownership: User-owned.
- Authentication: Uses a local account but registers with Entra for cloud access.
2. Entra Joined Devices
These are strictly corporate-owned devices. They are joined only to Microsoft Entra ID and do not require an on-premises Active Directory.
- Ownership: Organization-owned.
- Authentication: Users sign in with their corporate Entra ID account (e.g.,
name@company.com).
3. Hybrid Entra Joined Devices
For established firms that still rely on an on-premises Active Directory but want cloud benefits. These devices are “joined” to the local AD and “registered” in the cloud.
Accessing the Microsoft Entra Admin Center
To begin, you need the right permissions. I recommend using the Global Administrator or Cloud Device Administrator role for these tasks.
- Navigate to the Microsoft Entra admin center.
- Sign in with your administrative credentials.
- On the left-hand sidebar, expand the Identity menu.
- Select Devices and then click on All devices. Check out the screenshot below for your reference.
Check out How To Access Microsoft Entra Admin Center
Step-by-Step Tutorial: How a Device is Added to the Portal
In the Entra admin center, “adding” a device usually involves configuring the settings that allow devices to join, or manually importing hardware identifiers for automated deployment.
Phase 1: Configuring Device Settings
Before a user can add their device, you must permit the action in the portal.
- Go to: Devices > Device settings.
- Users may join devices to Microsoft Entra ID: Set this to “All” or “Selected” (highly recommended for security).
- Additional local administrators: Here, you can designate IT staff with local admin rights on all joined devices.
- Require Multi-Factor Authentication (MFA): Set this to “Yes.” This is a security “must-have” in the USA to prevent rogue devices from joining your tenant. Check out the screenshot below for your reference.