aad.sh

[
    {
      "resourceAppId": "00000003-0000-0000-c000-000000000000", // microsoft graph
      "resourceAccess": [
        {
          "id": "5b567255-7703-4780-807c-7be8301ae99b", // read all groups
          "type": "Role" // application permission
        },
        {
          "id": "37f7f235-527c-4136-accd-4a02d197296e", // sign users in
          "type": "Scope" // delegated permission
        }
      ]
    }
]