Helpguide --> https://help.sdpondemand.com/microsoft-intune-integration

https://help.sdpondemand.com/microsoft-intune-devices

​Permissions 

1) DeviceManagementManagedDevices.ReadWrite.All 

Read and write Microsoft Intune devices 

1. Allows the app to read and write the properties of devices managed by Microsoft Intune. Does not allow high impact operations such as remote wipe and password reset on the device's owner.

2) DeviceManagementManagedDevices.Read.All

Read Microsoft Intune devices 

1. Allows the app to read the properties of devices managed by Microsoft Intune.

3) DeviceManagementManagedDevices.PrivilegedOperations.All 

Perform user-impacting remote actions on Microsoft Intune devices 

1. Allows the app to perform remote high-impact actions such as wiping the device or resetting the passcode on devices managed by Microsoft Intune.