Ensure permission type is not set to 'Admin' in oauth2_permissions for AzureAD Application

Overly permissive applications may lead to lateral movement and unauthorised access.

At this time, the console UI does not have remediation steps available. For possible CLI remediation, see the product documentation (below) or use Terraform.

In Terraform -

1. In the azuread_application resource, set the oauth2_permission_scope.type field to User.

References:
https://learn.microsoft.com/en-us/azure/active-directory/authentication/concept-authentication-methods
https://registry.terraform.io/providers/hashicorp/azuread/latest/docs/resources/application#oauth2_permission_scope