title: Permissions required to run Remove-AzureRMAdGroup
body: <p>I'm using an SPN to remove an Azure AD group (Remove-AzureRMAdGroup), but get the error <code>insufficient privileges</code>. </p>
  
  <p>I granted the SPN the following permissions:</p>
  
  <p>Active Directory Graph (2)
  - Application Read and write all applications
  - Application Read and write directory data</p>
  
  <p>Microsoft Graph (1)
  - Application Read and write groups</p>
  
  <p>What permissions are apparently missing here? If we assign the SPN the Azure AD role <code>UserAccountAdmin</code> it works, but we'd prefer to have least privileged access.</p>