Microsoft Graph requires the organisation administrator to enable extra user permissions or to add an app to allow users to use this, whereas by reverse engineering users don't need organisation administrator permission.