Why is "Application permissions" disabled in Azure AD's "Request API permissions"? : <p>I'm trying to give a console app permission to call an API in Azure AD.</p>

<p>When I go to "Add permissions," "application permissions" is grayed out and I can only select "delegated permissions."</p>

<p>My understanding is that application permissions is right for the console app because it runs on the back-end and users don't sign into it.</p>

<p>From the help text for "application permissions":</p>

<blockquote>
  <p>Your application runs as a background service or daemon without a signed-in user.</p>
</blockquote>

<p>The help text for "delegated permissions":</p>

<blockquote>
  <p>Your application needs to access the API as the signed-in user.</p>
</blockquote>

<p>Why is "application permissions" disabled?</p>

<p><a href="https://i.stack.imgur.com/lZbGL.png" rel="noreferrer"><img src="https://i.stack.imgur.com/lZbGL.png" alt="Azure&#39;s &quot;Request API permissions&quot; dialog with a disabled &quot;application permission&quot; button"></a></p>
