| Permission type | Least privileged permissions | Higher privileged permissions |
|---|---|---|
| Delegated (work or school account) | Application.Read.All and Policy.Read.PermissionGrant | Application.Read.All and Policy.ReadWrite.PermissionGrant |
| Delegated (personal Microsoft account) | Not supported. | Not supported. |
| Application | Application.Read.All and Policy.Read.PermissionGrant | Application.Read.All and Policy.ReadWrite.PermissionGrant |