in your Microsoft 365 tenant. You must create this app registration before running the script.