...
Turn on System-assigned managed identity for the App Service
Assign to the App Service identity root level permissions to the App Service
Assign the App Service to the Global Administrator role for the tenant
These steps ensure that EmpowerID has the appropriate authentication and access to read and write the user information for your Azure tenant.
...