DSCResources/MSFT_EXOSafeAttachmentPolicy/settings.json

{
    "resourceName": "EXOSafeAttachmentPolicy",
    "description": "",
    "roles": {
        "read": [
            "Security Reader"
        ],
        "update": [
            "Security Administrator"
        ]
    },
    "permissions": {
        "graph": {
            "delegated": {
                "read": [],
                "update": []
            },
            "application": {
                "read": [],
                "update": []
            }
        },
        "exchange": {
            "requiredroles": [
                "Transport Hygiene",
                "Security Admin",
                "View-Only Configuration",
                "Security Reader"
            ],
            "requiredrolegroups": "Organization Management"
        }
    }
}