Minimise Admin Consent

For initial users the current admin consent requirement is way too broad. Have option to start with read / minimal update. Add more Admin Consent to be user triggered when required for capability turned on.

We have changed it to two app registrations, one for initial login and one for tenant management