DSCResources/MSFT_AADPolicy/settings.json

{
    "resourceName": "AADPolicy",
    "description": "This resource configures the Azure AD Policies.",
    "permissions": [
        {
            "read": [
                {
                    "name":"Policy.Read.All"
                }
            ],
            "update": [
                {
                    "name": "Policy.ReadWrite.ApplicationConfiguration"
                },
                {
                    "name": "Policy.ReadWrite.Authorization"
                },
                {
                    "name": "Policy.ReadWrite.ApplicationConfiguration"
                },
                {
                    "name": "Policy.ReadWrite.ConditionalAccess"
                },
                {
                    "name": "Policy.Read.All"
                }
            ]
        }
    ]
}