...
Follow below instructions to create the above (reference)
Step - 1: Application Registration
Go to Azure portal and log in.
Click on Azure Active Directory on the left-hand side navigation.
Navigate to App registrations
Click on New registration at the top
Give your application registration a Name that describes your app or purpose e.g. OnLink Connection
Select the default option for supported account types.
...
Click on API permissions on the left
Click Add a permission
Select Microsoft Graph
Then choose application permissions (not delegated).
In the Select permissions section, search for and select the permissions mentioned below:
User.ReadWrite.All
Group.ReadWrite.All
Organization.Read.All
Application.ReadWrite.All
Directory.ReadWrite.All
DeviceManagementApps.ReadWrite.All (For Microsoft Intune)
DeviceManagementApps.ManagedDevices.All (For Microsoft Intune)
Finalize the permission settings by clicking Add permissions and then Grant admin consent (if you selected permissions that require admin consent). Note that if you are not an admin, you won’t be able to complete the last step yourself, but need to ask your admin friend to click on the button for you.
...
Directory (tenant) ID. This can be seen on the Overview blade tab.
Application ID, referred to as Client ID on OnLink. This can be seen on the Overview blade tab.
And finally, you need the client secret. You should have already copied it earlier right after you created it in Step 3 above, but if you didn’t, create a new one.
...