title: Microsoft graph api returns 403 forbidden when calling groups/xxxx/members
body: <p>I have an application calling the graph api in order to update my database of users to match the active directory users.</p>
  
  <p>I see that every single user calling it is getting an error. 403 forbidden.  I did some research and saw that the user needs to grant directory.read...  so I did that and then it works.  </p>
  
  <p>However, I do not want to have my application request each user to grant those permissions.  I believe maybe I can accomplish the same goal by granting the right permissions to the “user” behind the application.  I am not really sure who that is.  Does maybe the secret and the client located in my web.config play into this?  The reason I think maybe yes, is because I use those credentials to initially authenticate myself to the graph api.  I do. To pass the current users Microsoft info to log in...</p>