Regarding the OAUTH api permission for client credentials flow grant.

Question

I have two registration in azure ad and we are trying to enable the OAUTH 2.0 for our application from one app registartion and I have added the api permission but access is not granted but my question is, do we need to add the api permission in the other app also?, kindly let me know.

THANKS

MANJU

Answer 1

Hi. Thank you for your question and reaching out. I’d be more than happy to help you with your query

For the OAuth 2.0 Client Credentials Flow Grant, the client application needs to be granted permission to access the API by the authorization server. This is done using a set of scopes, which are strings that define the level of access the client application needs. For example, a scope that grants read-only access to the API might be called "readapi", and a scope that grants both read and write access might be called "writeapi". Once the appropriate scopes have been granted, the client application can request an access token from the authorization server by providing its client credentials.

If the reply was helpful, please don’t forget to upvote or accept as answer, thank you.