Please register tyGraph Tenant API in your organization's Azure Active Directory if you haven't already. Admin Consent - required if you want to manage membership by group