API Permissions

Open the newly created/registered app >> API permissions >> Add a permission (Select permission as below):

API / Permissions name	Type	Description	Admin Consent Required
Azure Active Directory Graph (8)
Directory.Read.All	Application	Read directory data	Yes
Directory.ReadWrite.All	Application	Read and write directory data	Yes
Domain.ReadWrite.All	Application	Read and write domains	Yes
Domain.ReadWrite.All	Application	Read and write domains	Yes
Directory.AccessAsUser.All	Delegated	Access the directory as the signed-in user	-
Directory.ReadWrite.All	Delegated	Read and write directory data	Yes
User.Read	Delegated	Sign in and read user profile	-
User.Read.All	Delegated	Read all users' full profiles	Yes
Azure Service Management (1)
user_impersonation	Delegated	Access Azure Service Management as organization users (preview)	-
Microsoft Graph (6)
Directory.ReadWrite.All	Application	Read and write directory data	Yes
User.ReadWrite.All	Application	Read and write all users' full profiles	Yes
Directory.ReadWrite.All	Delegated	Read and write directory data	Yes
User.Read	Delegated	Sign in and read user profile	-
User.ReadWrite	Delegated	Read and write access to user profile	-
User.ReadWrite.All	Delegated	Read and write all users' full profiles	Yes