From 30905bbeb0f6685e208f4d78374ef63c37ac595e Mon Sep 17 00:00:00 2001 From: satishsinghi-gh Date: Sun, 29 Mar 2026 18:43:31 +0100 Subject: [PATCH] Add files via upload --- README.md | 3 +-- index.html | 6 +----- 2 files changed, 2 insertions(+), 7 deletions(-) diff --git a/README.md b/README.md index f8d22bb..d41b2c5 100644 --- a/README.md +++ b/README.md @@ -1,4 +1,4 @@ -# MDM On-Demand Actions (MDM-ODA) ⚡ +# MDM On-Demand Actions (MDM-ODA) ⚡ **Live Analytics, Insights & Actions for Entra ID and Intune** @@ -222,7 +222,6 @@ git clone https://github.com/satishsinghi-gh/mdm-oda.git | `Device.Read.All` | Resolve devices, read properties, query registered users | | `DeviceManagementConfiguration.Read.All` | Read Intune config profiles and policies for assignment lookups | | `DeviceManagementManagedDevices.Read.All` | Query managed devices by Azure AD device ID or serial number | -| `DeviceManagementRBAC.Read.All` | Read Intune RBAC settings (role assignments and role definitions) | | `offline_access` | Maintain refresh token for persistent session | > **Note:** The documented least-privileged permissions for group write operations are `Group.ReadWrite.All` and `GroupMember.ReadWrite.All`. However, based on testing, group owners with scoped Intune RBAC roles can perform all write operations with only the read-only scopes above. If you want to guarantee write access regardless of ownership, add `Group.ReadWrite.All` and `GroupMember.ReadWrite.All`. diff --git a/index.html b/index.html index b2f7328..7d7b73c 100644 --- a/index.html +++ b/index.html @@ -1,4 +1,4 @@ - + @@ -889,10 +889,6 @@ DeviceManagementManagedDevices.Read.All Query managed devices by Azure AD device ID or serial number - - DeviceManagementRBAC.Read.All - Read Intune RBAC settings (role assignments and role definitions) - offline_access Maintain refresh token for persistent session