Get-InactiveUsersReport.ps1 Authentication with IdentityAuth.psm1 header

[rpeterslll]

Get-InactiveUsersReport.ps1 script only allows authentication credentials to be manually entered. Is it possible to add a -LogonToken parameter to the script to apply an already created Authentication token using the IdentityAuth.psm1 script? Or can we hardcode a credential securely into the script to run the report in an automation?

[rpeterslll]

What Role's does the authenticating account require to run this Get-InactiveUsersReport.ps1 ? My API account fails with a 403 forbidden error, but the installeruser account run's it ok.