To support group based authentication and searching for users to grant permissions this plugin needs some graph API permissions: If you can't grant these permissions you will want to disable this feature so that: