DSCResources/MSFT_EXOMailboxIRMAccess/settings.json

{
  "resourceName": "EXOMailboxIRMAccess",
  "description": "Use this resource to create block Mailbox IRM access for delegates.",
  "roles": {
    "read": [
      "Global Reader"
    ],
    "update": [
      "Exchange Administrator"
    ]
  },
  "permissions": {
    "graph": {
      "delegated": {
        "read": [],
        "update": []
      },
      "application": {
        "read": [],
        "update": []
      }
    },
    "exchange": {
      "requiredroles": [
        "Hygiene Management",
        "Compliance Management",
        "Organization Management",
        "View-Only Organization Management"
      ],
      "requiredrolegroups": [
        "Organization Management"
      ]
    }
  },
  "requiredModules": []
}