The app must be registered. You can register the application in the Azure Active Directory admin center. The Azure AD access reviews feature has an API in the Microsoft Graph endpoint. You can register an Azure AD application and set it up for permissions to call the access reviews API in Graph. Reference: https://docs.microsoft.com/en-us/azure/active-directory/develop/quickstart-register-app