I would also like to know if this is now mandatory and if so, at what point did Microsoft change from allowing users to consent delegated permissions to now having to define them as low-risk? Suddenly getting complaints that admins must consent for new users while previous users were able to consent without issue.