Which of the following permissions require admin consent?
AppCatalog.Submit
BusinessScenarioConfig.Read.OwnedBy
Users.Read
Calendars.ReadBasic.All
Users.Read.All
Calendars.Read.Shared
Generally, permissions ending in .All or involving org-wide data require admin consent. Also, some app-specific permissions like AppCatalog.Submit do too. Source: Microsoft Graph permissions reference
.All