AADSTS50105 User Not Assigned to a Role for the Application: A Read-First Enterprise App Assignment Triage

AADSTS50105 means Assignment required is on and the user isn't assigned. Read the app, group membership, and nested groups before you turn it off.