azuread_group: document all application permissions needed when creating groups inside administrative units

azuread_group: document all application permissions needed when creating groups inside administrative units #1245