💡 Summary

For regular update and maintenance of ScubaGear, the permissions required of the module should be abstracted to a separate file instead of coded with the authentication module. This is so scripts or other code utilizing ScubaGear can check for permission ScubaGear permission updates and automatically notify or update permissions itself if using a Service Principal.

Motivation and context

Easier future maintenance of ScubaGear permissions for code utilizing ScubaGear.

Implementation notes

• Abstract out the MS Graph API permissions in Connection.psm1 to a permissions JSON file.
• Add Service Principal Permissions to the JSON file.
• Keep permissions for both Commercial (including GCC) and Government (GCC High) in the JSON file.

Acceptance criteria

• Permissions for ScubaGear are abstracted out to some permissions JSON file.
• A cmdlet is added to read and display the information in the JSON file.
• This permissions file is noted in the documentation.