ISE Integration with Intune - User.Read.All Persmissons

[pinglis]

We are looking to integrate ISE with Intune but are getting some pushback on the requirement for User.Read.All permissions.

Why is User.Read.All required?

Will it still work with User.ReadBasic.All?

Thanks

[Greg Gibbs]

For what specific use case are you creating the App Registration in Entra ID?

If this is specifically for MDM integration between ISE and Intune, only the following API permissions are required as stated in the Integrate MDM and UEM Servers with Cisco ISE