Device Application Roles for Microsoft Graph
Role | ID | Purpose | Description |
---|---|---|---|
Device.Read.All | 7438b122-aefc-4978-80ed-43db9fcc7715 | Read all devices | Allows the app to read your organization’s devices’ configuration information without a signed-in user. |
Device.ReadWrite.All | 1138cb37-bd11-4084-a2b7-9f71582aeddb | Read and write devices | Allows the app to read and write all device properties without a signed in user. Does not allow device creation, device deletion or update of device alternative security identifiers. |