Site Administration without Sites.FullControl.All?

[MvL12]

I am simply trying to manage an existing site by adding/removing folders and files, nothing special. I am new to the App Registration approach, but I read through lots of documentation and in the end I always see the requirement of having Sites.FullControl.All permissions to manage sites. Is that true?

What I'm trying to do:

1. Connect to a site
2. Create/Change/Delete Folders and/or files
3. grant permissions to that folders

So, nothing special at all. My code looks like:

Connect-PnPOnline "https://TenantName.sharepoint.com/MySiteName" -ClientId "MyClientID" -Tenant TenantName.onmicrosoft.com -Thumbprint "CertThumbprint -verbose

Get-PnPTenantId
Get-PnPSite

Output is the following:

I am surprised to get the tenant ID, which means to me, that a connection is established, but thats all. No functions for files/folders are working.

The following permissions are given, some of them are not important in my current case, but the last ones are not given due to enterprise policies:

[Barbarur]

You can grant the permission Site.Selected. Then grant Edit (or full control) for the app on that single site.

[MvL12]

The Site.Selected Permission was a very good hint so far, but I didnt get how to grant edit or full control rights to my App. I thought it would be the Grant-PnPAzureADAppSitePermission command, but using it leads to another error.

As far as I have read, I need the Sites.read.all Permission application wise to make it work. Thats a permission, which I wont be granted due to enterprise policies.

[MvL12]

Is there a way besides the Sites.read.all application rights to ensure my application is granted sufficient permissions for managin the site I am connecting to?