I’m trying to get access for “Microsoft Graph Command Line Tools” working with delegated permissions. Is it not possible to login to the Entra/Azure and manually add graph permissions I want rather than having to wait either for another user or myself to use the app and request permissions to run that app and then allow after that happens?

For example, if I know I want the app to have delegated admin consent for something like Policy.Read.IdentityProtection (which is a permission that requires admin consent) then can I not just login and add that in the app registration here?

I am not currently using “admin consent workflow” which means users can’t even request access to permissions that need admin-consent so it seems like I have to add Policy.Read.IdentityProtection to the scope request in the app, run the app while authenticating as an admin, then consent to that permission while granting it to the directory and then the app becomes stamped with that admin consent permission and I can see it in the portal.

But why can’t I just add this permission manually in the portal instead of having to make the request from the app? Or can I actually do that and can’t seem to figure out how?