O365SearchAndIntelligenceConfigurations: Which permissions are required to use this resource?

[ricmestre]

Description of the issue

Recently this resource has been added the feature of running through a service principal, but the permissions have not been updated in settings.json for application, in fact it won't even work correctly in delegated scenarios since it calls things like Get-MgGroup and it only lists User.Read.All/User.ReadWrite.All as required permissions.

Additionally will this actually work with application at all? According to [0] it's possible to use an application to update item insights but it won't work to update people insights and the module is calling Update-MgBetaOrganizationSettingPersonInsight so either the module or the documentation is wrong.

[0] https://learn.microsoft.com/en-us/graph/api/insightssettings-update?view=graph-rest-beta&tabs=http

Microsoft 365 DSC Version

1.25.122.2

Which workloads are affected

Exchange Online

The DSC configuration

N/A

Verbose logs showing the problem

N/A

Environment Information + PowerShell Version

Win11/PS5.1