The permission issue was resolved after authenticating through admin consent: https://login.microsoftonline.com/{tenantid}/adminconsent?client_id={client_id}