...
*The Group.Read.All permission for Microsoft Graph is necessary only if a customer is unable to include the group names, instead of group ids, as part of the access token. With Group.Read.All permission granted, ModelOp Center will be able to retrieve the group names from Microsoft Graph and display them instead of their ids throughout the platform. For details on how to grant permission Group.Read.All, please refer to Microsoft Entra ID: How-to guide.
NOTE: Once the internal-client app has been created, please open the “Overview” tab for the app and click on:
...
For instructions on how to create custom_scopeand modelop_client, and how to set the access token version, please follow the Microsoft Entra ID: How-to guide.