You are developing a web app that will use the Microsoft Graph API. The app will use a front end to authenticate users and a backend to provision new unified groups.
Users do not have permission to provision groups in Azure Active Directory (Azure AD).
You need to recommend which permission types to grant. The solution must use the principle of least privilege.
What should you recommend? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.