handle current format for graph API endpoint GET /{user-id}/permissions

It looks like the structure of the JSON response has been changed. This patch fixes the creation of Permission objects from such a result. I have tested this against the API version 2.2.