Graph API claims scope doesn't exist when it appears in explorer

Question

Hello,

I am working on developing an application in Django using MSAL and the Graph API.

I am attempting to make an interface similar to Intune that allows the user to reboot, wipe, and manage devices remotely.

However, when I attempt to log in to my Microsoft account in the application, the Graph API gives this response:

I'm a bit confused as when I attempt to make the same request through the Graph Explorer, it says it will need the "DeviceManagementManagedDevices.PriviligedOperations.All" permission, but when my app requests it, the API claims the permission does not exist.

Here is the list of scopes my application requests:

When I remove the aforementioned last one, the application works but is unable to make the API calls to wipe or reboot devices. I'm unsure where to go from here.

Answer 1

Hi @Spencer Tenney ,"DeviceManagementManagedDevices.PriviligedOperations.All" has been having some issues. Please review this thread for some more information. In that thread they post this thread as a possible solution. I'm not sure if you've seen these already, but if not please take a look and let me know if it works or not. If not I can help you further.

Thank you,
James

Answer 2

I think you have an extra s on that permission. Here it is DeviceManagementManagedDevices.PriviligedOperation.All. Notice the singular priviliged operation.