Using the Graph API to work ... using the Azure Active Directory APIs. These can generate the correct access token that needs to be passed as part of any REST call to the Microsoft Graph.