Scope App Permissions for Secure Automation using Microsoft Azure Active Directory
Microsoft Graph app permissions for a service or daemon may be too permissive, but more granular permissions can be scoped using Azure AD.
Dev Blogs