Note: only one is required from each list. Each list is also sorted from least to most privileged permissions for better clarity. See https://docs.microsoft.com/en-us/graph/permissions-reference for more/better information on Graph API permissions
- Assign App/Install status: DeviceManagementApps.ReadWrite.All
- Compliance Policy Assign/status: DeviceManagementConfiguration.ReadWrite.All
- Configuration Policy Assign/status: DeviceManagementConfiguration.ReadWrite.All
- Last logged on user: DeviceManagementManagedDevices.ReadWrite.All
- Rename device: DeviceManagementManagedDevices.PriviligedOperation.All
- Reboot device: DeviceManagementManagedDevices.PriviligedOperation.All
- Reset device: DeviceManagementManagedDevices.PriviligedOperation.All
- Sync device: DeviceManagementManagedDevices.PriviligedOperation.All
- Update Ring/status: DeviceManagementConfiguration.ReadWrite.All