This message was deleted.

This Active Directory API is being deprecated. You need to use now the Microsoft Graph from the top of your screenshot and select the respective API permissions. Note the Microsoft Graph API is much more granular. So this documentation section has to be updated and someone need to confirm the Graph API permissions required to get the rancher working properly.