Ryan Benedetti

Thanks, as always, for the speedy response, Geert! You can get security group permissions, using Microsoft's "admin-restricted scopes" and admin endpoint: https://docs.microsoft.com/en-us/azure/active-directory/develop/active-directory-v2-scopes Here is the section of interest: "Admin-restricted scopes...