Scope builder

A machine-to-machine web client in Access gets 401 from a service when its Default audiences lack the service's audience, and 403 when its Default scopes lack the operation's scope. Tick the operations your integration calls; the panel gives the audiences and the smallest set of scopes to paste into the client.

1. Pick the services

Users and credentials

Sign-in and verification

Consent and delegation

Tenant configuration

2. Tick the operations you call

Pick one or more services above to list their operations.