Unable to add/remove members to the **O365 private group** with Group.ReadWrite.All and User.Read.All permission using MSGraphClient in SharePoint Framework(SPFx) webpart.

I have approved the permissions from SharePoint Admin API Access page, so that my "SharePoint Online Client Extensibility Web Application Principal" get the required delegated permissions. Even tried with GroupMember.ReadWrite.All and Directory.ReadWrite.All permissions.

```
POST https://graph.microsoft.com/v1.0/groups/{groupid}/members/$ref
{
    "@odata.id": "https://graph.microsoft.com/v1.0/users/{userid}"
}

```

also tried with below body

```
{
    "@odata.id": "https://graph.microsoft.com/v1.0/directoryObjects/{userid}"
}

```

Below is the error text:

```
Uncaught (in promise) Error: Error making HttpClient request in queryable [403] Forbidden ::> {
  "error": {
    "code": "Authorization_RequestDenied",
    "message": "Insufficient privileges to complete the operation.",
    "innerError": {
      "date": "2020-09-09T20:18:44",
      "request-id": "ea951e6c-ae43-4907-8c86-e6f6c8346462"
    }
  }
}

```

When I sign in using O365 account other than Group owners account, I get this error. It works fine when I use the Group Owner account to run the same code.

Here are the screenshots from both API management and Azure AD App pages
[![enter image description here](https://i.stack.imgur.com/YjTKY.png)](https://i.stack.imgur.com/YjTKY.png)
[![enter image description here](https://i.stack.imgur.com/i83qI.png)](https://i.stack.imgur.com/i83qI.png)