Permission guidence for Azure AAD needed by the operator

[sabre1041]

Currently, the recommendations for API permissions to be granted for Azure Active Directory is the following:

• Group.Read.All
• GroupMember.Read.All
• User.Read.All

Alternately, the following permission can be used instead:

• Directory.Read.All

Should the guidance be changed to use this new permission model or retain the existing guidance

[davidkarlsen]

It should be as narrow as possible, so the three given is probably the best. I don't think User.Read.All is required - perhaps User.ReadBasic.All is sufficient.