Is it possible to only request "read" permissions for Intune Manager and exclude "write" permissions in the request?

[surferstylee]

I have a customer who was double hacked in the same week and is still shell-shocked and weary of the "write" permissions in the request I have submitted. Since I am only using the tool to document their environment, is there a way to "easily" change the request to exclude any "write permissions or is this a heavier task than I want to know?

[Micke-K]

Hello,

There is no option for this. You would have to add permissions manually.

One quick and dirty way to do this is to update all .ReadWrite. in the EndpointManager.psm1 file to .Read.
A simple search and replace would fix that.

Note that I have not tested this myself, but this should in theory fix it.

Cheers!

[surferstylee]

Thank you very much and I'll give the find and replace option a great run in my lab and then with my customer. I'll update you after I get some data/results my friend! Cheers m8! 🤙 ~m Cheers, 🤙 ~m

…

On Mon, Jul 8, 2024, 3:58 PM Mikael Karlsson ***@***.***> wrote: Hello, There is no option for this. You would have to add permissions manually. One quick and dirty way to do this is to update all .ReadWrite. in the EndpointManager.psm1 file to .Read. A simple search and replace would fix that. Note that I have not tested this myself, but this should in theory fix it. Cheers! — Reply to this email directly, view it on GitHub <#251 (comment)>, or unsubscribe <https://github.com/notifications/unsubscribe-auth/AEHRPUTYTJ4KEKHUXFO3DO3ZLL4QZAVCNFSM6AAAAABKRN7GTKVHI2DSMVQWIX3LMV43SRDJONRXK43TNFXW4Q3PNVWWK3TUHM4TSOJRGY4TC> . You are receiving this because you authored the thread.Message ID: ***@***.*** com>