Microsoft Graph permissions

Perform user-impacting remote actions on Microsoft Intune devices

Allows the app to perform remote high impact actions such as wiping the device or resetting the passcode on devices managed by Microsoft Intune, without a signed-in user.

Permission ID

5b07b0dd-2377-4e44-a38d-703f09a0dc3c

Catalog state

Enabled

Perform user-impacting remote actions on Microsoft Intune devices

Allows the app to perform remote high impact actions such as wiping the device or resetting the passcode on devices managed by Microsoft Intune.

Permission ID

3404d2bf-2b13-457e-a330-c24615765193

Catalog state

Enabled

Read Microsoft Intune devices

Allows the app to read the properties of devices managed by Microsoft Intune, without a signed-in user.

Permission ID

2f51be20-0bb4-4fed-bf7b-db946066c75e

Catalog state

Enabled

Read Microsoft Intune devices

Allows the app to read the properties of devices managed by Microsoft Intune.

Permission ID

314874da-47d6-4978-88dc-cf0d37f0bb82

Catalog state

Enabled

Read and write Microsoft Intune devices

Allows the app to read and write the properties of devices managed by Microsoft Intune, without a signed-in user. Does not allow high impact operations such as remote wipe and password reset on the device's owner

Permission ID

243333ab-4d21-40cb-a475-36241daa0842

Catalog state

Enabled

Read and write Microsoft Intune devices

Allows the app to read and write the properties of devices managed by Microsoft Intune. Does not allow high impact operations such as remote wipe and password reset on the device's owner.

Permission ID

44642bfe-8385-4adc-8fc6-fe3cb2c375c3

Catalog state

Enabled

Read Microsoft Intune RBAC settings

Allows the app to read the properties relating to the Microsoft Intune Role-Based Access Control (RBAC) settings, without a signed-in user.

Permission ID

58ca0d9a-1575-47e1-a3cb-007ef2e4583b

Catalog state

Enabled

Read Microsoft Intune RBAC settings

Allows the app to read the properties relating to the Microsoft Intune Role-Based Access Control (RBAC) settings.

Permission ID

49f0cc30-024c-4dfd-ab3e-82e137ee5431

Catalog state

Enabled

Read and write Microsoft Intune RBAC settings

Allows the app to read and write the properties relating to the Microsoft Intune Role-Based Access Control (RBAC) settings, without a signed-in user.

Permission ID

e330c4f0-4170-414e-a55a-2f022ec2b57b

Catalog state

Enabled

Read and write Microsoft Intune RBAC settings

Allows the app to read and write the properties relating to the Microsoft Intune Role-Based Access Control (RBAC) settings.

Permission ID

0c5e8a55-87a6-4556-93ab-adc52c4d862d

Catalog state

Enabled

Read Microsoft Intune configuration

Allows the app to read Microsoft Intune service properties including device enrollment and third party service connection configuration, without a signed-in user.

Permission ID

06a5fe6d-c49d-46a7-b082-56b1b14103c7

Catalog state

Enabled

Read Microsoft Intune configuration

Allows the app to read Microsoft Intune service properties including device enrollment and third party service connection configuration.

Permission ID

8696daa5-bce5-4b2e-83f9-51b6defc4e1e

Catalog state

Enabled

Read and write Microsoft Intune configuration

Allows the app to read and write Microsoft Intune service properties including device enrollment and third party service connection configuration, without a signed-in user.

Permission ID

5ac13192-7ace-4fcf-b828-1a26f28068ee

Catalog state

Enabled

Read and write Microsoft Intune configuration

Allows the app to read and write Microsoft Intune service properties including device enrollment and third party service connection configuration.

Permission ID

662ed50a-ac44-4eef-ad86-62eed9be2a29

Catalog state

Enabled

Read all device templates, their owners, and devices created from those device templates.

Allows the app to read device templates, their owners, and devices created from those device templates, without a signed-in user.

Permission ID

dd9febb5-0c6d-419f-b256-3afe12c6adeb

Catalog state

Enabled

Read all device templates, their owners, and devices created from those device templates

Allows the app to read device templates, their owners, and devices created from those device templates on behalf of the signed-in user.

Permission ID

2bcae0b0-aa93-48e4-a9e4-855482dffdcd

Catalog state

Enabled

Read and write all device templates, their owners, and devices created from those device templates.

Allows the app to read and write all device templates, their owners, and devices created from those device templates without a signed-in user.

Permission ID

9fadb66e-6421-4744-aede-4ab6fb98a884

Catalog state

Enabled

Read and write all device templates, their owners, and devices created from those device templates

Allows the app to read and write all device templates, their owners, and devices created from those device templates on behalf of the signed-in user.

Permission ID

2d372e98-f1ae-406c-a157-2ea83f6f5e4a

Catalog state

Enabled

Access directory as the signed in user

Allows the app to have the same access to information in the directory as the signed-in user.

Permission ID

0e263e50-5827-48a4-b97c-d940288653c7

Catalog state

Enabled

Read directory data

Allows the app to read data in your organization's directory, such as users, groups and apps, without a signed-in user.

Permission ID

7ab1d382-f21e-4acd-a863-ba3e13f7da61

Catalog state

Enabled

Read directory data

Allows the app to read data in your organization's directory, such as users, groups and apps.

Permission ID

06da0dbc-49e2-44d2-8312-53f166ab848a

Catalog state

Enabled

Read and write directory data

Allows the app to read and write data in your organization's directory, such as users, and groups, without a signed-in user. Does not allow user or group deletion.

Permission ID

19dbc75e-c2e2-444c-a770-ec69d8559fc7

Catalog state

Enabled

Read and write directory data

Allows the app to read and write data in your organization's directory, such as users, and groups. It does not allow the app to delete users or groups, or reset user passwords.

Permission ID

c5366453-9fb0-48a5-a156-24f0c49a4b84

Catalog state

Enabled

Read all Azure AD recommendations

Allows the app to read all Azure AD recommendations, without a signed-in user.

Permission ID

ae73097b-cb2a-4447-b064-5d80f6093921

Catalog state

Enabled

Read Azure AD recommendations

Allows the app to read Azure AD recommendations, on behalf of the signed-in user.

Permission ID

34d3bd24-f6a6-468c-b67c-0c365c1d6410

Catalog state

Enabled