The Azure Marketplace app follows the Azure-standard approach of SCIM provisioning, you do not have to specify any permissions. The app works very similarly to any other SCIM Provisioning app on the marketplace.
That said, the permission that Microsoft Azure uses would be User.ReadAll and User.Read based on the scope of provisioning.