There is a command group 'az_ad_app_permission'. This group of commands could 'manage an application s oauth2 permissions'. The group of commands has global parameter '--debug' which means 'Increase logging verbosity to show all debug logs.'. The group of commands has global parameter '--help -h' which means 'Show this help message and exit.'. The group of commands has global parameter '--only-show-errors' which means 'Only show errors, suppressing warnings.'. The group of commands has global parameter '--output -o' which means 'Output format.'. The group of commands has global parameter '--query' which means 'JMESPath query string. See <a href="http://jmespath.org/">http://jmespath.org/</a> for more information and examples.'. The group of commands has global parameter '--subscription' which means 'Name or ID of subscription. You can configure the default subscription using `az account set -s NAME_OR_ID`.'. The group of commands has global parameter '--verbose' which means 'Increase logging verbosity. Use --debug for full debug logs.'. This group contains a child command 'az_ad_app_permission_delete'.The syntax is: az ad app permission delete --api
                            --id
                            [--api-permissions]. The 1th example of the child command would be to use it to 'remove microsoft graph permissions', the syntax is: az ad app permission delete --id eeba0b46-78e5-4a1a-a1aa-cafe6c123456 --api 00000003-0000-0000-c000-000000000000. The 2th example of the child command would be to use it to 'remove microsoft graph delegated permission user read', the syntax is: az ad app permission delete --id eeba0b46-78e5-4a1a-a1aa-cafe6c123456 --api 00000003-0000-0000-c000-000000000000 --api-permissions e1fe6dd8-ba31-4d61-89e7-88639da4683d. The parameter '--api' is required. It is used to requiredresourceaccess.resourceappid - the unique identifier for the resource that the application requires access to. this should be equal to the appid declared on the target resource application.. The parameter '--id' is required. It is used to identifier uri, application id, or object id.. The parameter '--api-permissions' is optional. specify `resourceaccess.id` - the unique identifier for one of the oauth2permission or approle instances that the resource application exposes. space-separated list of `<resource-access-id>`.. 