After you have published the SCIM microservice app to Azure, run do the following PowerShell script to assign Graph API the needed permissions to the app service managed identity.
...
Page Comparison
Manage space
Manage content
Integrations