The email profiles extension for Windows Intune must be installed and enabled.

Before you can view the Email Profiles node in the Configuration Manager console and create and deploy email profiles, the Email Profiles Extension for Windows Intune must be installed and enabled.

For more information about how to configure the email profiles extension, see Configuring Email Profiles in Configuration Manager.

Specific security permissions must be granted to manage email profiles

You must have the following security permissions to manage company resource access settings, such as email profiles:

• To view and manage alerts and reports for email profiles: Create, Delete, Modify, Modify Report, Read, and Run Report permissions for the Alerts object.
  
  
• To create and manage certificate profiles: Author Policy, Modify Report, Read and Run Report permissions for the Certificate Profile object.
  
  
• To manage email profile deployments: Deploy Configuration Policies, Modify Client Status Alert, Read, and Read Resource permissions for the Collection object.
  
  
• To manage all configuration policies: Create, Delete, Modify, Read and Set Security Scope permissions for the Configuration Policy object.
  
  
• To run queries that are related to email profiles: Read permission for the Query object.
  
  
• To view email profiles information in the Configuration Manager console: Read permission for the Site object.
  
  
• To enable the email profiles extension: Modify permission for the Site object.
  
  

  Important
  To ensure that the email profiles extension is enabled hierarchy-wide, you must have this permission at all sites in the hierarchy.

• To view status messages for email profiles: Read permission for the Status Messages object.
  
  
• To create and manage email profiles: Author Policy, Modify Report, Read, and Run Report permissions for the Communications Provisioning Profile object.
  
  

The Company Resource Access Manager security role includes these permissions that are required to manage email profiles in Configuration Manager. For more information, see the Configure Role-Based Administration section in the Configuring Security for Configuration Manager topic.