DSCResources/MSFT_ADOPermissionGroupSettings/settings.json

{
    "resourceName": "ADOPermissionGroupSettings",
    "description": "Manages permissions in Azure DevOPS.",
    "roles": {
        "read": [],
        "update": []
    },
    "permissions": {
        "graph": {
            "delegated": {
                "read": [],
                "update": []
            },
            "application": {
                "read": [],
                "update": []
            }
        },
        "Azure DevOps": {
            "delegated": {
                "read": [
                    {
                        "name": "vso.graph"
                    },
                    {
                        "name": "vso.profile"
                    }
                ],
                "update": [
                    {
                        "name": "vso.identity"
                    },
                    {
                        "name": "vso.graph"
                    },
                    {
                        "name": "vso.profile"
                    },
                    {
                        "name": "vso.security_manage"
                    },
                    {
                        "name": "vso.security_manage"
                    }
                ]
            }
        }
    }
}