Click on the Application created in the previous activity.
Click on API Permissions
Click on + Add a permission
Click Microsoft Graph
Click Application permissions
Navigate to Group and tick Group.Read.All
Navigate to Group Member and tick GroupMember.Read.All
Click Add Permissions
Note these permissions have a notice requiring Admin Consent
Click Grant Admin Consent, then OK after reading the warning.
Notice the updated permissions.
You have now granted permissions for this application to view the groups in the tenant and the members for those groups. We’ll use this application later.