Wich scope use to get the access token for microsft credential

Question

Hello,
I'm trying to do postman access token request to reach the following api :

however the result returned is always the same :

"error": {
    "code": "Unauthorized",
    "message": "Unauthorized",
    "target": "XXXXXXXX-XXXX-XXXX-XXXX-XXXXXXXXXXXX"
}

Here is the request I've used to get the access token :

Body:
client_id : my client id
scope : https://graph.microsoft.com/.default
client_secret : my client secret
grant_type : client_credentials

Header :
Content-Type : x-www-form-urlencoded

The response return me a token that is apparently not recognized by the first request...

I've tryed several scopes such as : /.default, user.read openid profile offline_access, https://graph.microsoft.com/.defaul

Even if they are all returning me a token, none of them seems to work.

I've also added the right to WindowsDefenderATP > Vulnerability.read, from the azure portal.

Is the problem the scope ? What scope should I use if i have a cllient credential grant type ?

Answer

Put your access token on jwt.ms and see if you have User.ReadWrite Or User.ReadWrite.All are present or not.

1 answer