Grant permissions to the Profile application in Azure

1. In the Azure management portal, select the Active Directory tab and an Office 365 tenant.
2. Select the Applications tab and click the application that you want to configure.
3. In the permissions to other applications section
   • Add the Office 365 unified API (preview) application , and select the
     • Read items in all site collections
     • Access directory as the signed in user permissions
     • Read directory data
   • Note that the Enable sign-on and read users' profiles of the Windows Azure Active Directory is added by default. Leave that permission enabled.
4. Save the changes.