Minimum Permissons require to run the New-PnPUPABulkImportJob

[sivakavurinjc]

$WebUrl = "https://*******.sharepoint.com/sites/UserProfileSync"
$LibraryName ="Shared Documents"
$userLookupKey="IdName"
$propertyMap = New-Object -type 'System.Collections.Generic.Dictionary[String,String]'
$propertyMap.Add("IsAccountDisabled", "IsAccountDisabledSTR")
$propertyMap.Add("Location", "ELocation")
Connect-PnPOnline -Url $WebUrl -ClientId $ClientId -Tenant $TenantId -CertificatePath $CertificatePath -CertificatePassword $securePassword
$job = New-PnPUPABulkImportJob -Folder $LibraryName -Path $localFilePath -IdProperty $userLookupKey -UserProfilePropertyMapping $propertyMap 
$job

When I run the above script I am getting an error "Attempted to perform an unauthorized operation."

The following are the permissions that are granted for the client id

1. Sites.Selected (Application Permissions)
2. Granted the full control to site using https://*******.sharepoint.com/sites/UserProfileSync/_layouts/15/appinv.aspx
3. Also Granted the following permissions for https://*-admin.sharepoint.com/_layouts/15/appinv.aspx

      <AppPermissionRequests AllowAppOnlyPolicy="true">
  <AppPermissionRequest Scope="http://sharepoint/content/tenant" Right="FullControl" />
  <AppPermissionRequest Scope="http://sharepoint/social/tenant" Right="FullControl" />
</AppPermissionRequests>

Do we need to still grant Sites.ReadWrite.All for SharePoint for the App registration?