Exam MS-600 topic 2 question 7 discussion

You are developing an application that will use Microsoft Graph.
You attempt to retrieve a list of the groups in your organization by using a URI of https://graph.microsoft.com/v1.0/groups on behalf of the user.
The application fails. The diagnostic logs show the following information:
✑ An HTTP 403 Forbidden status code.
✑ An Authorization_RequestDenied error code.
✑ The following error message: `Insufficient privileges to complete the operation.`
You need to ensure that the application can retrieve the list of groups. The solution must use the principle of least privilege.
Which two actions should you perform? Each correct answer presents part of the solution.
NOTE: Each correct selection is worth one point.