...
4. Select API Permissions.
Add Azure Active Directory Microsoft Graph -> Application permissions -> Directory / Directory
Add following permissions
Group/ Group.Read.All
User/ User.Read.All
Click Grant admin consent and then Yes for confirmation pop-up
...
...
4. Make sure that Admin consent status is granted for all permissions
...
5. Select Certificates & secrets.
...