insufficient privileges on dynamic service principals

[zs-ko]

When configuring the application according to the documentation using microsoft graph api i am unable to add dynamic service principals and only receive provider#CreateApplication: Failure responding to request: StatusCode=403 -- Original Error: autorest/azure: Service returned an error. Status=403 Code="Authorization_RequestDenied" Message="Insufficient privileges to complete the operation."

Searching around it is suggested that i add the permissions for the legacy api. This has been depreceated for over a year and i cant enable it for new applications.

What access rights are required for this plugin as of now?

[dejoost]

this is a duplicate of #92