If your scopes laid out in this request span various resource server, then the Microsoft id System returns a token for the resource laid out in the primary scope. For more info, see Permissions and consent in the Microsoft identification platform. Usage of ' tenant ' tenant is denied. AADSTS500021 https://martin9bac6.blogzet.com/5-simple-statements-about-tentenbet-site-explained-46937620