Function to connect to Graph with scopes using Microsoft Graph Powershell Application

[emifo]

Function Start-GraphAuth(){
$scope = @(
"openid"
"offline_access"
"DeviceManagementManagedDevices.PrivilegedOperations.All"
"DeviceManagementManagedDevices.ReadWrite.All"
"DeviceManagementRBAC.ReadWrite.All"
"DeviceManagementApps.ReadWrite.All"
"DeviceManagementConfiguration.ReadWrite.All"
"DeviceManagementServiceConfig.ReadWrite.All"
"Group.ReadWrite.All"
"Directory.Read.All"
"User.Read"
"Group.Read.All"
"AuditLog.Read.All"
"UserAuthenticationMethod.Read.All"
"AuthenticationContext.Read.All"
"Policy.Read.All"
)
#Client Id for Microsoft Graph Powershell Application
$clientid = "14d82eec-204b-4c2f-b7e8-296a70dab67e"
$token = Get-MsalToken -ClientId $clientid -Scopes $scope

##Connect to Graph
Connect-MgGraph -AccessToken $token.AccessToken
Select-MgProfile -Name Beta

}

Remember to only use permission scopes for what you need.

[joshtransient]

Did you know that you can use Connect-MgGraph with a custom app registration to log in as a user? The only requirement is to add http://localhost:54424 as a mobile and desktop applications redirect URI, then

Connect-MgGraph -ClientId <GUID> -TenantId <GUID>

[emifo]

Thanks for the comment josh. I should have written that this was intended for an easy way to connect for a "multi-tenant" scenario. I did not know about the http://localhost:54424 for a custom app reg, thanks for pointing that out :)

[thiagobeier]

question for the group, what would be the best way to automate full tasks using less powershell modules when it comes to connect-msgraph and connect-mggraph for automated tasks?
I'm looking forward to build a connection-function to reuse in all automated tasks only by leveraging 2 types of modules
function connect-readonly that would give all ready only all over the place users, groups, devices, intune
function connect-readwrite with read-write on the same categories users, groups, devices, intune