
Explanation
Graphical user interface, text, application, chat or text message Description automatically generated

Microsoft identity platform supports two types of permissions: delegated permissions and application permissions.
Box 1: Delegated
* Delegated permissions are used by apps that have a signed-in user present. For these apps, either the user or an administrator consents to the permissions that the app requests, and the app is delegated permission to act as the signed-in user when making calls to the target resource.
Box 2: Application
* Application permissions are used by apps that run without a signed-in user present; for example, apps that run as background services or daemons. Application permissions can only be consented by an administrator.
Reference: https://docs.microsoft.com/en-us/azure/active-directory/develop/v2-permissions-and-consent