1) Request the template files from panagenda (support@panagenda.com)
2) Create a resource group manually (default: panagenda-azure-lighthouse)
3) Open Azure CLI as a subscription owner
4) Upload the template files via Azure CLI
5) Switch to PowerShell
6) Execute the following command to make sure the correct SubId is in context
Set-AzContext -Subscription {ID}

7)
# If a resource group is used, adjust the location and RG parameters depending on your needs 
New-AzSubscriptionDeployment -TemplateFile panagenda-azure-lighthouse-rg.json -TemplateParameterFile panagenda-azure-lighthouse.parameters.json -rgName panagenda-azure-lighthouse -Location WestEurope

1) Create Azure AD App registration -- Name: OfficeExpert Graph API Subscriptions
2) Choose Single Tenant and keep all default settings
3) Open the new registered application and create a client secret (Certificate & secrets)
4) Open the manifest and add the following resource access configuration

"requiredResourceAccess": [
        {
            "resourceAppId": "00000003-0000-0000-c000-000000000000",
            "resourceAccess": [
                {
                    "id": "b0afded3-3588-46d8-8b3d-9842eff778da",
                    "type": "Role"
                },
                {
                    "id": "7b2449af-6ccd-4f4d-9f78-e550c193f0d1",
                    "type": "Role"
                },
                {
                    "id": "7ab1d382-f21e-4acd-a863-ba3e13f7da61",
                    "type": "Role"
                },
                {
                    "id": "e1fe6dd8-ba31-4d61-89e7-88639da4683d",
                    "type": "Scope"
                }
            ]
        },
        {
            "resourceAppId": "00000002-0000-0000-c000-000000000000",
            "resourceAccess": [
                {
                    "id": "5778995a-e1bf-45b8-affa-663a9f3f4d04",
                    "type": "Role"
                }
            ]
        }
    ],

5) Give admin consent to all the added permissions