Hi
Microsoft introduced Role Based Access Control for Applications in Exchange Online (Preview)
learn.microsoft.com/.../application-rbac
practical365.com/.../
In short, Exchange permissions for Azure AD application are managed in Exchange - not in Azure …