Reference
Roles and permissions, for you and your security reviewer.
- GDAP roles Lemhi needs and whyThe six GDAP roles Lemhi asks for, why three are administrator roles, the roles it never asks for, and the Partner Center requirements.
- Permissions Lemhi's application receivesThe Microsoft permissions Lemhi's application is granted in each client tenant, what Lemhi reads, and quick answers for security reviewers.