Vheck if you set up application permissions as descibed in the doc, and that cloud admin approved those permissions.