Cloud Application Administrator rights are typically needed to initially generate the token that FlexNet Manager Suite uses to retrieve data (that's appropriate as you normally wouldn't want non-privileged people to be able to generate tokens that provide access to the Microsoft 365 API). The rights assigned to the token itself that is used to access the Microsoft 365 API and retrieve data only need to include read-only access.
See the following page for some more discussion about the process and associated rights involved in configuring the Microsoft 365 connection and initially generating the access token: Using FlexNet Manager Suite’s Multi-Tenant App to Connect to Microsoft 365
(Did my reply solve the question? Click "ACCEPT AS SOLUTION" to help others find answers faster. Liked something? Click "KUDO". Anything expressed here is my own view and not necessarily that of my employer, Flexera.)
