Not getting scp calims in access token

Question

I followed the following document https://learn.microsoft.com/en-us/defender-endpoint/api/exposed-apis-create-app-nativeapp#create-an-app to create an app. I tried getting the access token and using that access token i tried hitting the following API: https://api.securitycenter.microsoft.com/api/indicators (Reference: https://learn.microsoft.com/en-us/defender-endpoint/api/post-ti-indicator). However I keep getting 403 with below response.

I have already added the appropriate API permission still it gives the same error. Apart from that the access token doesnot contain 'scp' claim as suggested in the documentation.

{
    "error": {
        "code": "Forbidden",
        "message": "Missing application roles. API required roles: Ti.ReadWrite.All,Ti.ReadWrite, application roles: .",
        "target": "|a3a2c86d-4d801fec358d26ce.1."
    }
}

Answer 1

Hello nikunj bhat,

As discussed offline, please pass scope as https://api.securitycenter.microsoft.com/.default

If the resolution was helpful, kindly take a moment to accept the answer and upvote it 👍 it as a token of appreciation.