Page Comparison

...

1. Click on API permissions on the left

2. Click Add a permission

3. Select Microsoft Graph

4. Then choose application permissions (not delegated).

5. In the Select permissions section, search for and select the permissions mentioned below:

   • User.ReadWrite.All

   • Group.ReadWrite.All

   • Organization.Read.All

   • Application.ReadWrite.All

   • Directory.ReadWrite.All 

   • DeviceManagementApps.ReadWrite.All (For Microsoft Intune)

   • DeviceManagementApps.ManagedDevices.All (For Microsoft Intune)

6. Finalize the permission settings by clicking Add permissions and then Grant admin consent (if you selected permissions that require admin consent). Note that if you are not an admin, you won’t be able to complete the last step yourself, but need to ask your admin friend to click on the button for you.

...