Azure App Registration : scope list not complete

Question

I created an azure App registration :

I used Adal for authentification :

the problem is when I decrypt the generated tokens ( sharepoint and graph api), I get :

"scp": "User.Read",

I need to know :

• Why I get only this permission in the scope claim?
• How can this to get all permissions ?

Thanks,

Answer 1

I'm guessing in this case it might be the behaviour of the v1 endpoint where if you have already consented to something on an API, it'll just give you the token with those, regardless that you added more.

You can add prompt=consent to the authorization URL when your app redirects you to log in. This will force consenting to all permissions again.