To configure application permissions on the Microsoft Application Registration Portal:
In the API permissions page, click + Add a permission.
Select the Microsoft Graph API.
Select Application permissions.
Select permissions that give explicit authorization to access resources on behalf of the resource owner. For example, you as admin can authorize permission to read user application files but not read calendars.
Files.Read.All
Files.ReadWrite.All
Sites.Read.All
Sites.ReadWrite.All
User.Read.All
User.ReadWrite.All
Select the following permissions:
Click Add permissions.
In the API permissions page, click Grant admin consent for the permissions added.
When prompted, select Yes to grant consent for requested permissions.
A message appears affirming the successful granting of requested permissions.