Microsoft Entra ID
MonitoringManage devices in Microsoft Entra ID using the Microsoft Entra admin center
In brief
For reused Windows Autopilot devices with a new owner, the new owner must contact a non-device owner administrator to obtain the BitLocker recovery key, even when the new owner is an administrator.
What Entra admins need to know
Administrators who are not the device owner may need to provide recovery keys to new device owners.
This editorial summary was generated by AI from the documentation changes. Verify important details in the full Microsoft Learn article.
Documentation change
View on Microsoft LearnThe comparison below shows only the changed extract. Use the full-page view for complete context.
Manage device identities using the Microsoft Entra admin center
View and filter your devices
@@ -2,9 +2,9 @@ title: Manage devices in Microsoft Entra ID using the Microsoft Entra admin center description: This article describes how to use the Microsoft Entra admin center to manage device identities and monitor related event information. ms.topic: how-to-ms.date: 06/17/2026+ms.date: 11/12/2026 ms.reviewer: myra-ramdenbourg-ms.custom: sfi-image-nochange+ms.custom: sfi-image-nochange, msecd-doc-authoring-1030 --- # Manage device identities using the Microsoft Entra admin center @@ -99,7 +99,7 @@ To view or copy BitLocker keys, you need to be the owner of the device or have o - [Security Reader](../role-based-access-control/permissions-reference.md#security-reader) > [!NOTE]-> When devices that utilize [Windows Autopilot](/mem/autopilot/windows-autopilot) are reused, **and there is a new device owner**, that new device owner must contact an administrator to acquire the BitLocker recovery key for that device. Custom role or administrative unit scoped administrators will continue to have access to BitLocker recovery keys for those devices that have undergone device ownership changes, unless the new device owner belongs to a custom role or administrative unit scope. In such an instance, the user will need to contact other scoped administrator for the recovery keys. For more information, see the article [Find the primary user of an Intune device](/mem/intune/remote-actions/find-primary-user#change-a-devices-primary-user).+> When devices that utilize [Windows Autopilot](/mem/autopilot/windows-autopilot) are reused, **and there is a new device owner**, that new device owner must contact a non-device owner administrator to acquire the BitLocker recovery key for that device, even if the new device owner is an admin. Custom role or administrative unit scoped administrators will continue to have access to BitLocker recovery keys for those devices that have undergone device ownership changes, unless the new device owner belongs to a custom role or administrative unit scope. In such an instance, the user will need to contact other scoped administrator for the recovery keys. For more information, see the article [Find the primary user of an Intune device](/mem/intune/remote-actions/find-primary-user#change-a-devices-primary-user). ## View and filter your devices