This article describes the API permissions that must be setup in Azure for the following connector: 'Microsoft-Intune-Connector'.

The 'Microsoft-Intune-Connector connector uses the 'Microsoft Graph' API. Permissions for this can be viewed and requested under App registration for the Spider Intune Connector in Azure.

Choose Application permissions and the following permissions:
AppCatalog.Read.All
AuditLog.Read.All
Device.Read.All
DeviceManagementConfiguration.Read.All
DeviceManagemenManagedDevices.Read.All
Directory.Read.All
Domain.Read.All
Group.Read.All
Reports.Read.All
User.ReadBasic.All
User.Read.All

In order for the Spider Intune connector to receive the required data the 'Microsoft Graph' API requires that the Application permissions be granted Admin Consent within in the Azure Portal: 

Please note: Admin consent is required for this API permission to function.