Usually, your account must be assigned the global administrator role in order to protect Microsoft 365 data using the cloud Agent for Microsoft 365.
However, in some cases, it may be impossible to use the Global Administrator role, e.g. due to security restrictions.
Grant Tenant wide permissions to the Backup Service application and create a custom role for this purpose. Please follow instructions in Microsoft documentation:
- Grant tenant-wide admin consent to an application - Azure AD | Microsoft Docs
- App consent permissions for custom roles in Azure Active Directory | Microsoft Docs