MS Graph permissions question

[RorySRut]

What are the MS Graph permissions that need to be set with an App Registration to use the commandlets?

[Harrison-Tennis]

Hi Rory,

In our Environment we are using
Claim Value;
DeviceManagementManagedDevices.Read.All
Directory.Read.All
AuditLog.Read.All
DeviceManagementApps.ReadWrite.All
DeviceManagementApps.Read.All

If you just wanted to do the 'things', you could probably just go with "DeviceManagementApps.ReadWrite.All"

[AlkHacNar]

@RorySRut

we use the folloving
Device.Read.All
DeviceManagementManagedDevices.ReadWrite.All
DeviceManagementServiceConfig.ReadWrite.All (used to delete autopilot devices)
GroupMember.ReadWrite.All (only needed, when you want to use the -addtogroup flag)

[tugich]

Hi everyone

I am having the following problem registering the application:

The command which I'm using to test:
Get-IntuneWin32App -Verbose

Update > It's now solved:
I added RedirectUri in the app registration - Value is: https://login.microsoftonline.com/common/oauth2/nativeclient