Microsoft Graph API missing permissions / scopes on consent screen

Question

Problem:

The app usually requests the following permissions, which works fine.

• 'offline_access'
• 'MailboxSettings.Read'
• 'Mail.ReadWrite.Shared'
• 'Mail.Send.Shared'
• 'User.Read'

There is one user (free MS account) who's consent screen only shows and requests the following permissions:

• 'offline_access'
• 'User.Read'

As you can see, all the Mail scopes are missing.

Solutions / thoughts:

The app does not use incremental authorization, so all permissions are requested at the beginning.

Within Microsoft Azure > App registration: the following supported account type is chosen "Accounts in any organizational directory (Any Azure AD directory - Multitenant) and personal Microsoft accounts (e.g. Skype, Xbox) All users with a work or school, or personal Microsoft account can use your application or API. This includes Office 365 subscribers."

As stated above other organizational and personal accounts usually work fine.

Answer 1

Scopes such as 'Mail.Send.Shared' are not available for personal Microsoft IDs. Read for example here: https://learn.microsoft.com/en-us/graph/permissions-reference#delegated-permissions-44