Use delegated site.selected permissions when creating an SPO connection
Instead of requiring application level full control permissions to all site collections within a tenant in order to create a connection, please leverage the delegated sites.selected permissions through the site admin to enable the connection.