As far as I understand the azcli doesn\'t have an app registration in AAD, and now that it\'s possible to make rest calls from the azcli, how does one grant permissions that are