...
Click Save. Make a note of the Application (client) ID and the Directory (tenant) ID (should be the same as noted earlier).
Click "Certificates and secrets" on the left, click "New client secret", enter the descriptive name for this secret and set it to expire in an appropriate period. Click "Add". Note, when the secret expires, you'll have to create a new one and update the RSM InTime configuration.
Make a note of the the value in the Value field. This will not be displayed again.
Click "API permissions" on the left. Click "Add a permission" and add the permissions noted below. They will likely be found in "Delegated Permissions" in the Graph API.
...