Support Tip: Intune service discovery API endpoint will require specific permissions

But aren't the permission IDs unique to my tenant (like role IDs) so if I don't have an app that already uses the application.read.all from the Azure graph API (which I haven't found yet), and I can't add it through the GUI anymore, how am I supposed to get the permission ID to add with those steps on the link you provided? The doc even states you need to get the permission ID from a current app. I feel like this is sort of a catch 22 here, but maybe I'm missing something.