MS Graph permissions - do the ones we have right now HAVE to be application level?

We developed an MS Teams app that makes two Graph calls:       https://graph.microsoft.com/v1.0/chats/${chatId}/members https://graph.microsoft.com/v1.0/teams/${groupId}/Members       In th...