TestAdminConsentReadAll

Create an app registration, add this page as a SPA redirect URI, then grant admin consent for each permission you want to test:
Application.Read.All  Directory.Read.All  Device.Read.All  User.Read.All  Organization.Read.All  Policy.Read.All
Sign in as a normal user (no Entra roles) to verify what is accessible via delegated permissions alone.