...

For file control we will only need the flowing permissions (and a separate app will be step up like this):

...

Protocol used by Azure app for authentication

The app is a native Microsoft deployment and uses OAuth2 as documented here:

https://docs.microsoft.com/en-us/azure/app-service/overview-authentication-authorization

Option for Private Customer App

...

Production Key Vault and Certificate

Protocol used by Azure app for authentication

The app is a native Microsoft deployment and uses OAuth2 as documented here:

https://docs.microsoft.com/en-us/azure/app-service/overview-authentication-authorization