Modern workplace - Report only button in onboarding for safety

Currently Nerdio requires a lot of read and write rights when onboarding a customer. However as an MSP some of our customers do not want anything is there organization changing, we are solely a reporting factor. For me its a bit scary how “easy” you can assign a policy/config/… to a customer with enforce effects. If you by accident assign some setting to “All” this can have such a huge impact. Therefor as a safety feature i would like a report only/read only setting when onboarding a customer. Just to be sure that we will not write anything to there env. Ideally we would also have an app registration with limited rights for this.