The user account which was used to submit this request does not have the right to send mail on behalf of the specified sending account., Cannot submit message.ok

I try to send un email with ClientCredential and it doesn't work, i dont known if i do ther right thing :
Here is my code :

$tokenRequestContext = new ClientCredentialContext(
    'tenantId',
    'clientId',
    'secret'
);

$graphServiceClient = new GraphServiceClient($tokenRequestContext);

try {
    $sender = new EmailAddress();
    $sender->setAddress('john.doe@outlook.com');
    $sender->setName('John Doe');
    $fromRecipient = new Recipient();
    $fromRecipient->setEmailAddress($sender);

    $recipients = [];

    $recipientEmail = new EmailAddress();
    $recipientEmail->setAddress('jane.doe@outlook.com');
    $recipientEmail->setName('Jane Doe');
    $toRecipient = new Recipient();
    $toRecipient->setEmailAddress($recipientEmail);
    $recipients[] = $toRecipient;

    $emailBody = new ItemBody();
    $emailBody->setContent('Dummy content');
    $emailBody->setContentType(new BodyType(BodyType::TEXT));

    $message = new Message();
    $message->setSubject('Test Email');
    $message->setFrom($fromRecipient);
    $message->setToRecipients($recipients);
    $message->setBody($emailBody);

    $requestBody = new SendMailPostRequestBody();
    $requestBody->setMessage($message);

    /** @var UserItemRequestBuilder $user */
    $user = $graphServiceClient->users()->byUserId('userPrincipalName');
    $response = $user->sendMail()->post($requestBody)->wait();
    dump($response);

} catch (ApiException $ex) {
    echo $ex->getError()->getMessage();
}

I try to delegate right to send on userPrincipalName email but it doesn't work
i read doc lot of times and i don't understand why i doesn't work
I dont know if i can send an email like this with credential client account ?

Can you help me please ?
Thank you in advance

Start with the ClientCredentialContext setup and the users()->byUserId()->sendMail() request shown in the issue. Check the Microsoft Graph permissions and account configuration involved in sending on behalf of the specified user, then confirm the documented client-credential flow supports this request. Done means identifying the missing configuration or confirming a reproducible SDK defect.