Could you advise how your app registration is done? My app registration have AllSites.FullControl on SharePoint. But when I run your script I got error: ClientRequestException: (None, None, '403 Client Error: Forbidden for url https://xxxxx)