This guide will walk you through the steps of adding a permission to fix if you encounter the error message below on your Azure AD Integration.
Enable Directory.ReadAll permission on Graph.
Open Portal > Active Directory > App Registratoin > API Permission.
Select Microsoft Graph, then in the Application Permissions menu, tick each of the following:
- Read directory data
Save the selected permission, then click on Grant admin consent.
Once the permission has been granted you can proceed to check the Azure AD integration and connection will be successful.
IT Pro: How to read groups from Active Directory (AD on-premises and Azure AD).