Hi lantian,
Thanks for reaching out to Microsoft Q&A.
That depends on your requirements. All permissions are not needed.
You can Use a higher privileged permission or permissions only if your app requires it. For details about delegated and application permissions, see Permission types.
Please do not forget to "Accept the answer” and “up-vote” wherever the information provided helps you, this can be beneficial to other community members.