DSCResources/MSFT_SPOApp/settings.json

{
  "resourceName": "SPOApp",
  "description": "This resource allows users to deploy App instances in the App Catalog.",
  "permissions": {
    "graph": {
      "delegated": {
        "read": [
          {
            "name": "Domain.Read.All"
          }
        ],
        "update": [
          {
            "name": "Domain.Read.All"
          }
        ]
      },
      "application": {
        "read": [
          {
            "name": "Domain.Read.All"
          }
        ],
        "update": [
          {
            "name": "Domain.Read.All"
          }
        ]
      }
    },
    "sharepoint": {
      "delegated": {
        "read": [
          {
            "name": "Sites.FullControl.All"
          }
        ],
        "update": [
          {
            "name": "Sites.FullControl.All"
          }
        ]
      },
      "application": {
        "read": [
          {
            "name": "Sites.FullControl.All"
          }
        ],
        "update": [
          {
            "name": "Sites.FullControl.All"
          }
        ]
      }
    }
  },
  "requiredModules": [
    "PnP.PowerShell"
  ]
}