Graph scope matrix

Microsoft Graph permission matrix for OpenAdminOS agents.

This reference shows which agents require each Microsoft Graph scope.

Scope	Agents
`Application.Read.All`	Dormant app registrations
`AuditLog.Read.All`	Sign-in failure explainer Stale guest cleanup Tenant change audit
`Device.Read.All`	Offboarding agent
`DeviceManagementManagedDevices.PrivilegedOperations.All`	Offboarding agent
`DeviceManagementManagedDevices.Read.All`	Compliance overview Find inactive devices Intune Device Posture Auditor Offboarding agent OS update posture Tenant health report
`Directory.Read.All`	Tenant change audit
`IdentityRiskyUser.Read.All`	Risky user triage
`Policy.Read.All`	Conditional Access explainer
`SecurityEvents.Read.All`	Secure Score prioritizer
`User.Read.All`	Stale guest cleanup User license overview
`User.ReadWrite.All`	Stale guest cleanup