If your scopes laid out in this ask for span various resource server, then the Microsoft id System returns a token for your source laid out in the 1st scope. To learn more, see Permissions and consent within the Microsoft id System. Entry to ' tenant ' tenant is denied. AADSTS500021 impli