How to remove "RoleManagement.ReadWrite.Directory" permission (4381368)

How to remove "RoleManagement.ReadWrite.Directory" permission

1. Manually
   1. Grant the Migration - Basic consent.
   2. Manually add the Migration - Basic Service Principle to the Exchange Admin Role and delete RoleManagement.ReadWrite.Directory permission on the Migration - Basic enterprise application.
   3. Remove  "RoleManagement.ReadWrite.Directory" from the Quest On Demand - Migration - Basic - Minimal
      
      

2. Exchange RBAC
   1. Grant the Quest On Demand - Migration - Basic - Minimal consent
   2. Open a SR with the OD Org ID and request the feature flag "migration.accounts.skipAssignExchangeAdminRole" be enabled.
      
      
3. Remove the RoleManagement.ReadWrite.Directory permissions from the Quest On Demand Migration - Basic – Minimal enterprise application 
   
   
4. Get Application ID and Object ID for these two applications
   1. Quest On Demand - Migration - Basic - Minimal
   2. Quest On Demand - Migration - Mailbox Migration - Custom RBAC
      
      
5. Using the information collected above, create two service principals in Exchange Online
   1. New-ServicePrincipal -appid %Application ID% -objectid %Object ID% -displayname "Quest On Demand - Migration - Basic - Minimal"
   2. New-ServicePrincipal -appid %Application ID% -objectid %Object ID% -displayname "Quest On Demand - Migration - Mailbox Migration - Custom RBAC”
      
      
6. Create a new management scope in Exchange Online, using a name and recipient filter that meet your needs and configuration.
   1. New-ManagementScope -Name "ODM Migration Scope" -RecipientRestrictionFilter "Office -like 'Chicago*" 
   2. Create a Management Role Assignment for the "Quest On Demand - Migration - Basic - Minimal"
      1. New-ManagementRoleAssignment -App %Application ID% -Role "Distribution Groups”  -CustomResourceScope “ODM Migration Scope
      2. New-ManagementRoleAssignment -App %Application ID% -Role "Mail Recipient”  -CustomResourceScope “ODM Migration Scope 
   3. Create a Management Role Assignment for the "Quest On Demand - Migration - Mailbox Migration - Custom RBAC” application
      1. New-ManagementRoleAssignment -App %Application ID%  -Role "Application Calendars.Read" -CustomResourceScope "ODM Migration Scope”
      2. New-ManagementRoleAssignment -App %Application ID% -Role "Application EWS.AccessAsApp" -CustomResourceScope “ODM Migration Scope”