MC1066336 – Plan for Change: Updates to required permissions for Microsoft Graph Beta API deviceManagement (archived)

Product:

Entra, Intune, Microsoft Graph

Platform:

Developer, Online, World tenant

Status:

Change type:

Admin impact

Links:

MC1107490

Details:

Summary:
Starting July 31, 2025, Microsoft Graph Beta API deviceManagement will require either DeviceManagementScripts.Read.All or DeviceManagementScripts.ReadWrite.All permissions. Update any apps, scripts, or tools to include these permissions and remove the old ones. Detailed instructions are available in the provided links.

Details:
Starting July 31, 2025, or soon after, the following Graph APIs will require either DeviceManagementScripts.Read.All or DeviceManagementScripts.ReadWrite.All permissions to continue working:
~/deviceManagement/deviceShellScripts
~/deviceManagement/deviceHealthScripts
~/deviceManagement/deviceComplianceScripts
~/deviceManagement/deviceCustomAttributeShellScripts
~/deviceManagement/deviceManagementScripts

Change Category:
XXXXXXX ... free basic plan only

Scope:
XXXXXXX ... free basic plan only

Release Phase:

Created:
2025-05-02

updated:
2025-05-02

Task Type

XXXXXXX ... free basic plan only

Docu to Check

XXXXXXX ... free basic plan only

MS How does it affect me

XXXXXXX ... free basic plan only

MS Preperations

XXXXXXX ... free basic plan only

MS Urgency

XXXXXXX ... free basic plan only

MS workload name

XXXXXXX ... free basic plan only

summary for non-techies**

XXXXXXX ... free basic plan only

Direct effects for Operations**

Please, look at the most relevant linked item for details

explanation for non-techies**

Imagine you're a lawyer, manager, or HR professional overseeing a team that relies on certain tools to get work done. Now, think of these tools as a set of keys that unlock different doors in your office. Each key gives you access to specific rooms, and without the right key, you can't enter the room you need.

In the world of IT, these keys are like permissions that allow software applications to access certain features or data. Microsoft Graph Beta API, which is a tool used by many businesses to manage devices, is changing the keys (permissions) required to access its features. Starting July 31, 2025, new keys will be needed to open the same doors.

Previously, the keys you needed were called DeviceManagementConfiguration.ReadWrite.All or DeviceManagementConfiguration.Read.All. These keys allowed applications to perform tasks like managing device scripts. However, Microsoft is now requiring different keys: DeviceManagementScripts.Read.All or DeviceManagementScripts.ReadWrite.All. This means any application, script, or tool you use that interacts with Microsoft Graph Beta API will need to be updated to use these new keys.

Think of it like this: if you had a key labeled "Conference Room" that used to open the meeting room, but now you need a new key labeled "Meeting Room Access," you would need to get this new key to continue using the room. Similarly, your IT team will need to update the permissions in your applications to ensure they continue to function correctly.

For those who develop or manage software applications, it's important to review and update the permissions to include these new keys. This ensures that your applications continue to operate smoothly without interruption. If you have any enterprise applications or tools that are used across different customer environments, you'll need to ensure these are updated as well.

For detailed guidance on how to update these permissions, Microsoft provides instructions and resources online. It's like having a manual that shows you how to replace your old keys with new ones, ensuring that you and your team can continue to access the necessary rooms in your office without any hassle.