DSCResources/MSFT_IntuneApplicationControlPolicyWindows10/settings.json

{
  "resourceName": "IntuneApplicationControlPolicyWindows10",
  "description": "This resource configures a Intune Endpoint Protection Application Control policy for an Windows 10 Device.",
  "permissions": {
    "graph": {
      "delegated": {
        "read": [
          {
            "name": "Group.Read.All"
          },
          {
            "name": "DeviceManagementConfiguration.Read.All"
          }
        ],
        "update": [
          {
            "name": "Group.Read.All"
          },
          {
            "name": "DeviceManagementConfiguration.ReadWrite.All"
          }
        ]
      },
      "application": {
        "read": [
          {
            "name": "Group.Read.All"
          },
          {
            "name": "DeviceManagementConfiguration.Read.All"
          }
        ],
        "update": [
          {
            "name": "Group.Read.All"
          },
          {
            "name": "DeviceManagementConfiguration.ReadWrite.All"
          }
        ]
      }
    }
  },
  "requiredModules": [
    "Microsoft.Graph.Authentication",
    "Microsoft.Graph.Beta.DeviceManagement",
    "Microsoft.Graph.Groups"
  ],
  "supportedEnvironments": [
    "Global",
    "USGov"
  ],
  "mode": "Configuration",
  "commands": [
    {
      "module": "Microsoft.Graph.Authentication",
      "cmdlets": [
        "Invoke-MgGraphRequest"
      ]
    },
    {
      "module": "Microsoft.Graph.Beta.DeviceManagement",
      "cmdlets": [
        "Get-MgBetaDeviceManagementAssignmentFilter",
        "Get-MgBetaDeviceManagementIntent",
        "Get-MgBetaDeviceManagementIntentAssignment",
        "Get-MgBetaDeviceManagementIntentSetting",
        "Get-MgBetaDeviceManagementTemplateCategory",
        "Get-MgBetaDeviceManagementTemplateCategoryRecommendedSetting",
        "New-MgBetaDeviceManagementIntent",
        "Remove-MgBetaDeviceManagementIntent",
        "Update-MgBetaDeviceManagementIntent"
      ]
    },
    {
      "module": "Microsoft.Graph.Groups",
      "cmdlets": [
        "Get-MgGroup"
      ]
    }
  ]
}