...
To crawl SharePoint you'll need the following permissions:
...
In order to access SharePoint Online Rest API as an Azure AD Application, you'll need to create an Azure AD Application and add a Certificate. See the Azure AD Access for SharePoint Online Tutorial to configure it.
...