gsadmin/MDM-ODA
1
0
Fork 0
mirror of https://github.com/satishsinghi-gh/MDM-ODA.git synced 2026-07-26 11:38:13 +00:00
Code Issues Packages Projects Releases Wiki Activity

Add files via upload

Browse Source
This commit is contained in:
satishsinghi-gh
2026-03-29 18:43:31 +01:00
committed by GitHub
parent 4e37f3cd6d
commit 30905bbeb0
2 changed files with 2 additions and 7 deletions
Download Patch File Download Diff File Expand all files Collapse all files
README.md
+1 -2
View File
@@ -1,4 +1,4 @@
# MDM On-Demand Actions (MDM-ODA) ⚡ # MDM On-Demand Actions (MDM-ODA) ⚡
**Live Analytics, Insights & Actions for Entra ID and Intune** **Live Analytics, Insights & Actions for Entra ID and Intune**
@@ -222,7 +222,6 @@ git clone https://github.com/satishsinghi-gh/mdm-oda.git
| `Device.Read.All` | Resolve devices, read properties, query registered users | | `Device.Read.All` | Resolve devices, read properties, query registered users |
| `DeviceManagementConfiguration.Read.All` | Read Intune config profiles and policies for assignment lookups | | `DeviceManagementConfiguration.Read.All` | Read Intune config profiles and policies for assignment lookups |
| `DeviceManagementManagedDevices.Read.All` | Query managed devices by Azure AD device ID or serial number | | `DeviceManagementManagedDevices.Read.All` | Query managed devices by Azure AD device ID or serial number |
| `DeviceManagementRBAC.Read.All` | Read Intune RBAC settings (role assignments and role definitions) |
| `offline_access` | Maintain refresh token for persistent session | | `offline_access` | Maintain refresh token for persistent session |
> **Note:** The documented least-privileged permissions for group write operations are `Group.ReadWrite.All` and `GroupMember.ReadWrite.All`. However, based on testing, group owners with scoped Intune RBAC roles can perform all write operations with only the read-only scopes above. If you want to guarantee write access regardless of ownership, add `Group.ReadWrite.All` and `GroupMember.ReadWrite.All`. > **Note:** The documented least-privileged permissions for group write operations are `Group.ReadWrite.All` and `GroupMember.ReadWrite.All`. However, based on testing, group owners with scoped Intune RBAC roles can perform all write operations with only the read-only scopes above. If you want to guarantee write access regardless of ownership, add `Group.ReadWrite.All` and `GroupMember.ReadWrite.All`.
index.html
+1 -5
View File
@@ -1,4 +1,4 @@
<!DOCTYPE html> <!DOCTYPE html>
<html lang="en"> <html lang="en">
<head> <head>
<meta charset="UTF-8"> <meta charset="UTF-8">
@@ -889,10 +889,6 @@
<td><code>DeviceManagementManagedDevices.Read.All</code></td> <td><code>DeviceManagementManagedDevices.Read.All</code></td>
<td>Query managed devices by Azure AD device ID or serial number</td> <td>Query managed devices by Azure AD device ID or serial number</td>
</tr> </tr>
<tr>
<td><code>DeviceManagementRBAC.Read.All</code></td>
<td>Read Intune RBAC settings (role assignments and role definitions)</td>
</tr>
<tr> <tr>
<td><code>offline_access</code></td> <td><code>offline_access</code></td>
<td>Maintain refresh token for persistent session</td> <td>Maintain refresh token for persistent session</td>