Your Graph script asks for Directory.ReadWrite.All. It probably needs one permission.
Copy-pasted Connect-MgGraph lines are why so many admin scripts run with far more access than they use.
· 2 min read
blog
Blog
Notes on running scripts in production: what goes wrong, how far a change reaches, and how to check before you press Enter.
Before you hit Enter: a pre-run checklist a change board can sign
AI writes the script in ten seconds. The review still takes judgement. Here's a checklist that turns "looks fine" into evidence.
· 2 min read