Device Managers

Description

Deprecated - Do Not Use.

Directory Actions10

• microsoft.directory/devices/basic/update
• microsoft.directory/devices/extensionAttributeSet1/update
• microsoft.directory/devices/extensionAttributeSet2/update
• microsoft.directory/devices/extensionAttributeSet3/update
• microsoft.directory/devices/memberOf/read
• microsoft.directory/devices/registeredOwners/read
• microsoft.directory/devices/registeredOwners/update
• microsoft.directory/devices/registeredUsers/read
• microsoft.directory/devices/registeredUsers/update
• microsoft.directory/devices/standard/read

Graph API Permissions5

Microsoft do not provide a direct mapping between Directory actions and Graph API permissions, despite this being necessary for delegated (interactive) access. MSAdminRoles.com has meticulously compiled a list of the Graph API permissions that each built-in admin role enables you to utilise. Please note this listing is not 100% accurate. Graph API permissions and Entra RBAC operate as two independent authorisation planes and do not map to each other on a one-to-one basis.

• Device.CreateFromOwnedTemplate
• Device.Read.All
• DeviceLocalCredential.ReadBasic.All
• DeviceTemplate.Read.All
• DeviceTemplate.ReadWrite.All