DSCResources/MSFT_EXOEmailTenantSettings/settings.json

{
    "resourceName": "EXOEmailTenantSettings",
    "description": "",
    "roles": {
        "read": [
            "Global Reader"
        ],
        "update": [
            "Exchange Administrator"
        ]
    },
    "permissions": {
        "graph": {
            "delegated": {
                "read": [],
                "update": []
            },
            "application": {
                "read": [],
                "update": []
            }
        },
        "exchange": {
            "requiredroles": [
                "Organization Management",
                "Security Reader"
            ],
            "requiredrolegroups": [
               "Organization Management",
               "Security Administrator"
            ]
        }
    }
}