API Permissions for Right Click Tools, Insights & Patching

Specific Microsoft Graph API permissions are required for individual Entra/Intune features in Right Click Tools, as well as for access to all features in Right Click Tools Patching and Right Click Tools Privileged Access.

Right Click Tools

Add Devices to Entra GroupApplication permissions
  • Device.Read.All
  • Device.Read.Write.All
  • Group.Read.All
  • Group.Read.Write.All
Delete Device(s) From Azure (Intune/Entra)Application permissions
  • DeviceManagementManagedDevices.ReadWrite.All - for deleting devices from Intune
  • Device.ReadWrite.All - for deleting devices from Entra
Entra ID BitLocker Recovery Keys Application permissions
  • Device.Read.All
Delegated permissions
  • User.Read
  • BitlockerKey.Read.All
  • BitlockerKey.ReadBasic.All
  • DeviceManagementConfiguration.Read.All
  • DeviceManagementManagedDevices.Read.All

Right Click Tools Insights

Collect warranty information for devices managed in Intune
Application permissions
  • DeviceManagementManagedDevices.Read.All

Right Click Tools Privileged Access

For all Privileged Access features
Application permissions
  • Device.Read.All
  • GroupMember.Read.All
  • User.Read.All

Right Click Tools Patching

For all Patching features

Application permissions