This page is for older ‘pull based’ user synchronization, which reads AzureAD information via GraphAPI.
We have newer and better ‘push based’ SCIM user synchronization, which should be used if you are implementing new user data synchronization.
General
There are three separate synchronization options to synchronize user data from Azure Active Directory to Enreach Cloud systems.
...
Add Microsoft Graph -> Application permissions
Add following permissions
Group/ Group.Read.All
User/ User.Read.All
Click Grant admin consent and then Yes for confirmation pop-up
...