<?php

return [
    'permissions' => [
        [
            'key' => 'DeviceManagementConfiguration.ReadWrite.All',
            'type' => 'application',
            'description' => 'Read and write Intune device configuration policies.',
            'features' => ['policy-sync', 'backup', 'restore'],
        ],
        [
            'key' => 'DeviceManagementApps.ReadWrite.All',
            'type' => 'application',
            'description' => 'Manage app configuration and assignments for Intune.',
            'features' => ['backup', 'restore'],
        ],
        [
            'key' => 'Directory.Read.All',
            'type' => 'application',
            'description' => 'Read directory data needed for tenant health checks.',
            'features' => ['tenant-health'],
        ],
    ],
];