To support group based authentication and searching for users to grant permissions this plugin
needs some graph API permissions:
- People.Read
- User.Read.All
- Group.Read.All
If you can't grant these permissions you will want to disable this feature so that:
- Your logs aren't full of permission errors
- A different component is used for filling in users that allows free text