How to grant Graph API permissions when using Column Validation with AD users/groups