Scope builder
A machine-to-machine web client in Access gets 401 from a service when its Default audiences lack the service's audience, and 403 when its Default scopes lack the operation's scope. Tick the operations your integration calls; the panel gives the audiences and the smallest set of scopes to paste into the client.
1. Pick the services
Users and credentials
Sign-in and verification
Consent and delegation
Tenant configuration
2. Tick the operations you call
Pick one or more services above to list their operations.