Configure each App Service app with its own app registration in Azure AD.
Give each App Service app its own permissions and consent.
Avoid permission sharing between environments by using separate app registrations for separate deployment slots. When you're testing new code, this practice can help prevent issues from affecting the production app.
...