Microsoft Graph Access Token Not Returning All Granted Application Roles

Question

Microsoft Graph Access Token Not Returning All Granted Application Roles

Eugene Lucas 0

User's image

I configured multiple Microsoft Graph Application permissions in Azure AD and granted admin consent.

However, when requesting a token,The access token only contains some of the roles, not all.

What could cause Graph to exclude certain application permissions from the token?

Azizkhon Ishankhonov 1,010 Reputation points

2026-02-24T07:18:58.61+00:00

Hello @Eugene Lucas

As I understand, you are requesting an application-type token, but the token does not contain all the API permissions that were configured.

I tried obtaining a token in my tenant, and it contains all the permissions that I set.

Based on the information you provided, I suggest trying to obtain the token using curl, Postman, or another tool. This way, we can exclude the possibility that the issue is caused by incorrect code.
Lionel TRAVERSE 0 Reputation points MVP

2026-04-06T17:59:00.8666667+00:00

Hello,

Hello,

If I test with the same permissions as your issue:

I can see all permissions inside the access token:

Do you still have the issue ?

Regards,

Lionel

1 answer

Your answer

Azizkhon Ishankhonov 1,010 Reputation points

2026-02-24T07:18:58.61+00:00

Hello @Eugene Lucas

As I understand, you are requesting an application-type token, but the token does not contain all the API permissions that were configured.

I tried obtaining a token in my tenant, and it contains all the permissions that I set.

Based on the information you provided, I suggest trying to obtain the token using curl, Postman, or another tool. This way, we can exclude the possibility that the issue is caused by incorrect code.
Lionel TRAVERSE 0 Reputation points MVP

2026-04-06T17:59:00.8666667+00:00

Hello,

Hello,

If I test with the same permissions as your issue:

I can see all permissions inside the access token:

Do you still have the issue ?

Regards,

Lionel

Answer 1

Hello,

For your issue, when application permissions are granted via consent, they are normally visible in the access token, but I have already seen a delay of up to 24 hours before the permissions appear. Do you have the issue after waiting some hours ?

For your information, application permissions can be assigned with "ADMIN CONSENT" or with "APPRBAC". When permissions are assigned using APPRBAC, they do not appear in the token. Since the number of scoping associated with permissions granted via consent is limited, many large companies are now using APPRBAC for application permissions. In this case, the ROLES field in the token will be empty. Please be very careful, as you may encounter situations where the roles field is empty even though the permissions are correctly configured.

Regards,

Lionel

Share via

Microsoft Graph Access Token Not Returning All Granted Application Roles

1 answer

Your answer