DSCResources/MSFT_IntuneSecurityBaselineMicrosoft365AppsForEnterprise/settings.json

{
    "resourceName":"IntuneSecurityBaselineMicrosoft365AppsForEnterprise",
    "description":"This resource configures an Intune Security Baseline Microsoft365 Apps For Enterprise.",
    "permissions":{
        "graph":{
            "delegated":{
                "read":[
                    {
                        "name": "Group.Read.All"
                    },
                    {
                        "name":"DeviceManagementConfiguration.Read.All"
                    }
                ],
                "update":[
                    {
                        "name": "Group.Read.All"
                    },
                    {
                        "name":"DeviceManagementConfiguration.ReadWrite.All"
                    }
                ]
            },
            "application":{
                "read":[
                    {
                        "name": "Group.Read.All"
                    },
                    {
                        "name":"DeviceManagementConfiguration.Read.All"
                    }
                ],
                "update":[
                    {
                        "name": "Group.Read.All"
                    },
                    {
                        "name":"DeviceManagementConfiguration.ReadWrite.All"
                    }
                ]
            }
        }
    }
}