You are developing an application that will use Microsoft Graph.
You attempt to retrieve a list of the groups in your organization by using a URI of https://graph.microsoft.com/v1.0/groups on behalf of the user.
The application fails. The diagnostic logs show the following information:
An HTTP 403 Forbidden status code.
An Authorization_RequestDenied error code.
The following error message: “Insufficient privileges to complete the operation.” You need to ensure that the application can retrieve the list of groups. The solution must use the principle of least privilege.
Which two actions should you perform? Each correct answer presents part of the solution.
NOTE: Each correct selection is worth one point.
A. Configure the application to use application permissions.
B. Grant admin consent of the Group.Read.All permission for your tenant.
C. Configure the application permission Group.Read.All on the application.
D. In the permission request for the application, request the Group.ReadWrite.All permission.
