DSCResources/MSFT_AADGroup/settings.json

{
  "resourceName": "AADGroup",
  "description": "This resource configures an Azure Active Directory group.",
  "roles": {
    "read": [],
    "update": []
  },
  "permissions": {
    "graph": {
      "delegated": {
        "read": [
          {
            "name": "Group.Read.All"
          },
          {
            "name": "ReportSettings.Read.All"
          }
        ],
        "update": [
          {
            "name": "Group.ReadWrite.All"
          },
          {
            "name": "Organization.Read.All"
          },
          {
            "name": "RoleManagement.ReadWrite.Directory"
          },
          {
            "name": "User.Read.All"
          },
          {
            "name": "ReportSettings.ReadWrite.All"
          }
        ]
      },
      "application": {
        "read": [
          {
            "name": "Group.Read.All"
          },
          {
            "name": "ReportSettings.Read.All"
          }
        ],
        "update": [
          {
            "name": "Group.ReadWrite.All"
          },
          {
            "name": "Organization.Read.All"
          },
          {
            "name": "RoleManagement.ReadWrite.Directory"
          },
          {
            "name": "User.Read.All"
          },
          {
            "name": "ReportSettings.ReadWrite.All"
          }
        ]
      }
    }
  },
  "requiredModules": [
    "Microsoft.Graph.Applications",
    "Microsoft.Graph.Authentication",
    "Microsoft.Graph.Beta.Groups",
    "Microsoft.Graph.Beta.Identity.DirectoryManagement",
    "Microsoft.Graph.Beta.Identity.Governance",
    "Microsoft.Graph.Groups",
    "Microsoft.Graph.Identity.DirectoryManagement",
    "Microsoft.Graph.Users",
    "MSCloudLoginAssistant"
  ],
  "supportedEnvironments": [
    "Global",
    "USGov"
  ],
  "mode": "Data",
  "commands": [
    {
      "module": "Microsoft.Graph.Applications",
      "cmdlets": [
        "Get-MgApplication",
        "Get-MgServicePrincipal"
      ]
    },
    {
      "module": "Microsoft.Graph.Beta.Groups",
      "cmdlets": [
        "New-MgBetaGroupMemberByRef",
        "Remove-MgBetaGroupMemberDirectoryObjectByRef"
      ]
    },
    {
      "module": "Microsoft.Graph.Beta.Identity.DirectoryManagement",
      "cmdlets": [
        "Get-MgBetaDirectoryDeletedItemAsGroup",
        "Get-MgBetaSubscribedSku",
        "Restore-MgBetaDirectoryDeletedItem"
      ]
    },
    {
      "module": "Microsoft.Graph.Beta.Identity.Governance",
      "cmdlets": [
        "Get-MgBetaRoleManagementDirectoryRoleAssignment",
        "Get-MgBetaRoleManagementDirectoryRoleDefinition",
        "New-MgBetaRoleManagementDirectoryRoleAssignment",
        "Remove-MgBetaRoleManagementDirectoryRoleAssignment"
      ]
    },
    {
      "module": "Microsoft.Graph.Groups",
      "cmdlets": [
        "Get-MgGroup",
        "New-MgGroup",
        "New-MgGroupMember",
        "New-MgGroupMemberByRef",
        "New-MgGroupOwnerByRef",
        "Remove-MgGroup",
        "Remove-MgGroupMemberDirectoryObjectByRef",
        "Remove-MgGroupOwnerDirectoryObjectByRef",
        "Set-MgGroupLicense",
        "Update-MgGroup"
      ]
    },
    {
      "module": "Microsoft.Graph.Identity.DirectoryManagement",
      "cmdlets": [
        "Get-MgDevice"
      ]
    },
    {
      "module": "Microsoft.Graph.Users",
      "cmdlets": [
        "Get-MgUser"
      ]
    }
  ]
}