identify the permission that must be granted to the application.

HOTSPOT
You administer an Azure Active Directory (Azure AD) tenant.
You add a custom application to the tenant.
The application must be able to:
Read data from the tenant directly.
Write data to the tenant on behalf of a user. In the table below, identify the permission
that must be granted to the application. Make only one selection in each column.