Any azuread provider experts that can point me in the right direction on how to set the API Permissions for an app?