Grant Graph API Permissions to your App
The following permissions need to be granted to the app registration created following these steps in Azure AD:
API | Permission |
|---|---|
Microsoft Graph | User.Read.All |
Microsoft Graph | Group.Read.All |
Microsoft Graph | AuditLog.Read.All |
Azure Service Management | user_impersonate |
Follow the steps below to grant these API permissions.
Sign in to your Microsoft Azure portal Microsoft Azure Portal
.Enter active directory in search and select
Azure Active Directory to open the Azure Active Directory page.From the side bar menu, select
App registrations.From the list of app registrations, select the DNS Proxy app registration and the app registration page opens.
Note
This is the app registration created following these steps. If you named your app registration something other than DNS Proxy, select that app registration from the list.
On the app registration page, select
API permissions from the side bar menu.Select
Add a permission and the Request API permissions page opens.Select Microsoft Graph.
Select Application permissions.
Expand AuditLog and select AuditLog.Read.All.
Expand User and check User.Read.All.
Expand Group and check Group.Read.All.
Select Add permissions.
Select
Add a permission and the Request API permissions page opens.Select Azure Service Management.
Expand Permissions and select user_impersonation.
Select Add permissions.
Select
Grant admin consent.