Permissions required - For Scanning Microsoft Graph > Application permissions > AuditLog > AuditLog.Read.All and click Add permissions. Microsoft Graph > Application permissions > Directory > Directory.Read.All and click Add permissions.