With your App Registration still open in Azure, click API permissions on the left and then click Add a permission.