Grant permissions to the Profile application in Azure

1. In the Azure management portal, select the Active Directory tab and an Office 365 tenant.
2. Select the Applications tab and click the application that you want to configure.
3. In the permissions to other applications section
   • Add the Microsoft Graph application , and select the
     • Read items in all site collections
     • Read all files that user can access
     • Access directory as the signed in user
     • Read all users' basic profiles
   • Note that the Enable sign-on and read users' profiles of the Windows Azure Active Directory is added by default. Leave that permission enabled.
4. Save the changes.