If you need to use the client credential flow to get a group, the permissions required are shown in the following image, and the minimum permission you should grant is GroupMember.Read.All.
Please check the link for more details:
https://learn.microsoft.com/en-us/graph/api/group-list?view=graph-rest-1.0&tabs=http
Hope this helps.
If the reply is helpful, please click Accept Answer and kindly upvote it. If you have additional questions about this answer, please click Comment.