Device.Read.All

mandatory

Read all devices registered within the organization.

DeviceManagementApps.Read.All

mandatory

Read all Microsoft Intune registered apps on a device.

DeviceManagementConfiguration.Read.All

mandatory

Read Microsoft Intune device configuration and policies.

DeviceManagementManagedDevices.Read.All

mandatory

Read Microsoft Intune managed devices.

DeviceManagementServiceConfig.Read.All

mandatory

Read Microsoft Intune configuration.

Directory.Read.All

mandatory

Read directory data in the directory of the organization. Users, groups, and devices will be extracted.

User.Read.All

mandatory

Read all user profiles. Basic user data (name, mail, user principal name, etc.) and subscription details will be extracted.