Final grant — Claude runs 365

Two taps. After this, Claude does all 365 user admin via API — no more portal.

⚠️ This permission lets the automation app manage role assignments. Powerful — grant only because you want Claude to handle user admin. Claude can tighten it again afterward.

1Add the permission

Tap below → + Add a permission → Microsoft Graph → Application permissions, search this exact name, check it, Add:

RoleManagement.ReadWrite.Directory

Open API permissions →

2Grant consent

One tap → sign in as Global Admin → Accept.

Grant admin consent →

Then tell Claude “granted” — it assigns its own role + resets Bronson, no portal needed.