First-line RBAC role The addition of a first-line support RBAC role to NHSmail Intune allows Local Administrators to provision a restricted administrative role with read-only permissions to an organisation’s Intune configuration.