Role ID Purpose Description
DirectoryRecommendations.Read.All ae73097b-cb2a-4447-b064-5d80f6093921 Read all Azure AD recommendations Allows the app to read all Azure AD recommendations, without a signed-in user.
DirectoryRecommendations.ReadWrite.All 0e9eea12-4f01-45f6-9b8d-3ea4c8144158 Read and update all Azure AD recommendations Allows the app to read and update all Azure AD recommendations, without a signed-in user.