Since AzureAD graph is going away. Tested using old AzureAD graph usage for backwards-compatbility, did not seem to break things. Could not test with conditional access though due to azure never enforcing it no matter what I attempted. Fpr #3028