« first day (2 days earlier) 

9:25 AM
Alright, @Rukmini. I got a bit closer. I made separate global admin account and tested it out logged in with graph explorer. After consenting and logging in to managedtenants.read.all. It worked to read all the tenant IDs.
 
Great
 
I tried this in Postman with a standard auth code, so I had to login manually with the account. But then it still says unauthorized. If i copy the token from graph explorer it works in postman
Very peculiar
 
Did you check the scope in the token?
 
I tried, but I'm not sure whats best
I've tried .default and just managedTenants.read.all, but same result
 
in jwt.ms when you decode the token is the scope present?
 
9:31 AM
Yes, it has more, but managedtenants.read.all is in scp:
 
then it should work
@Bryant Can you post a new question with all the details and generating the token so that I can help you there?
 
Yes I will
 
Let me know here once you post the question with all related screenshots too
 
10:27 AM
I see you noticed it ha
 
Yeah
 

« first day (2 days earlier)