@@ -81,33 +81,26 @@ max-width="70%"
8181%}
8282
8383{: start ="3"}
84- 1 . Click** Application permissions** on the left, and select` Group > Read.All ` .
84+ 1 . Click** Application permissions** on the left.
85+ * Add` Group > Read.All `
86+ * Add` User > Read.All `
87+ 1 . Next add** Delegated permissions** on the right
88+ * Add` User > Read.All `
8589
86- > The` User.Read.All (Delegated) ` permission is added by default.
90+ > The` User.Read (Delegated) ` permission is added by default.
8791
8892{% include image.html
8993lightbox="true"
9094file="/images/sso/azure/config-app-permissions-selected.png"
9195url="/images/sso/azure/config-app-permissions-selected.png"
92- alt="` Group > Read.All `
93- caption="` Group > Read.All ` permissions for Microsoft Graph"
96+ alt="Full permissions for Microsoft Graph. "
97+ caption="Full permissions for Microsoft Graph"
9498max-width="70%"
9599%}
96100
97- {: start ="4 "}
101+ {: start ="5 "}
981021 . Click** Add Permissions** .
991031 . Click** Grant admin consent for Default Directory** on the bar.
100-
101- {% include image.html
102- lightbox="true"
103- file="/images/sso/azure/config-app-permissions-added.png"
104- url="/images/sso/azure/config-app-permissions-added.png"
105- alt="Grant admin consent for Default Directory"
106- caption="Grant admin consent for Default Directory"
107- max-width="70%"
108- %}
109-
110- {: start ="6"}
1111041 . Continue with[ Step 3: Create client secret in Azure] ( #step-3-create-client-secret-in-azure ) .
112105
113106