ayi <t>Please refer to below steps :<br/> <br/> <br/> From your screenshot , seems you grant Read and write directory data application permission for Windows Azure Active Directory(azure ad graph api) . Since you are using microsoft graph (https://graph.microsoft.com/) , you need to grant application permission for Microsoft Graph :<br/> <br/> <br/> <br/> Since you are admin in your AAD, You could grant permission for users in organization by click Grant permission button shown in above screenshot .<br/> <br/> <br/> Then you could use your code (client credential flow to get the token) and query users information . If you check the claims in access token issued by azure ad , you could find Directory.Read.All permission in roles claim .</t>
