Graph Explorer: Allowing users to self -consent when admin consent is not required

Hello!

I had what is hopefully a quick question about Microsoft Graph permissions that I was hoping someone could help with. Please let me know if there were more appropriate tags to use for this question, this seemed to be the only "Microsoft Graph" category.

Question:

What settings need to be configured in a tenant to allow users to self-consent to Microsoft Graph permissions that do not require additional admin consent?

For example, currently if I try and consent to the "Team.ReadBasic.All" permission in the Graph Explorer, which does not require admin consent, I get the following message:

It looks like we may need to enable the ability for users to self-consent to Graph API permissions even if those permissions do not require admin approval? However, I was not sure where this was done. It seems like it may be one of these options.

Option 1:

When I look up the Graph Explorer app registration in Microsoft Azure under enterprise applications, there is a "Grant admin consent to tenant" button. I was not sure if this needed to be activated, I was wary that doing so would give too much access. It seems like it might give the maximum graph API permissions to the app registration. We would not want to do that, as we just want to allow users to self-consent for permissions that don't require admin approval.

Option 2:

It also looked like in the enterprise applications section of Azure; we would be able to change the "User Consent Settings". If we update this from "Do not allow user consent" to "Allow user consent for apps from verified publishers, for selected permissions" OR "Let Microsoft manage your consent settings (Recommended)". Would that allow users to self-consent to permissions in the Graph Explorer?

If option 2 is the solution, is it possible to only allow a subset of users to have the self-consent option? Would we want to limit the graph explorer app to only certain users? Also please let me know if we should be looking at settings elsewhere in our tenant. Any information would be much appreciated. Thank you for your time.

Chris