Page Comparison

...

The required authorization must be set for the following APIs:

• Microsoft Graph;
• Windows Azure Active Directory.

so, after creating the application, you'll need to select it and add a new permission for both those APIs that API in the Required permissions menu.

...

1. In the Required permissions menu, click on Windows Azure Active Directory;In the Enable Access menu, select all permissions from Delegated Permissions and click on Microsoft Graph;
2. Choose Delegated Permissions and add these permissions: 
   1. APIConnectors.Read.All
   2. Directory.AccessAsUser.All
   3. PrivilegedAccess.ReadWrite.AzureAD
   4. profile
   5. User.Read
3. Click Save;
4. Finally, back to Required permissions menu, click on the Grant Permissions button.

...