Device.Read.All

mandatory

Read all devices registered within the organization.

Directory.Read.All

mandatory

Read directory data in the directory of the organization. Users, groups, and devices will be extracted.

Group.Read.All

mandatory

Read all groups including group properties and memberships.

RoleManagement.Read.Directory

mandatory

Read all directory RBAC settings. Directory roles and memberships will be extracted.

User.Read.All

mandatory

Read all user profiles. Basic user data (name, mail, user principal name, etc.) and subscription details will be extracted.