Microsoft Permissions for the Enterprise Portal
Enterprise Admin Guide › Microsoft Knowledge Needed › Microsoft Requirements
write directory data Allows the app to read and write data in your organization's directory, such as users, and groups. It does not allow the app to delete users or groups, or reset user passwords. Access the directory as