Log into the Azure Portal here then go to 'App registration' and select your newly registered application.
Go to 'API permissions', then select 'Add a permission' and click on 'Microsoft Graph'.
Select 'Application permissions' and search for 'User'. Scroll down and select 'User.Read.All'.