Flow to Azure AD Integration Not working

[Brian Hofmeiste]

Good day fine developers!  I've been trying to configure the AzureAD integration flow but I keep getting the error, "Forbidden Request. Please Check Oauth Token and scope permission." 

1. I've confirmed the API permissions are correct in Azure and attached them to this message for your review.  
2. I've confirmed the oauth token is valid and attached to this message for review.
3. I've also attached the flow error I'm receiving. 

What am I missing? Thanks all!

Brian

[Brian Hofmeiste · Accepted solution]

For anyone else having this issue... All of the graph permissions must be DELEGATED and not of type APPLICATION. 

[Iguana]

Hi,

In our case it helped to enable the option "Microsoft Entra roles can be assigned to group" on Azure.

[Nikita50]

Hi.. These permissions are defined at Azure end or ServiceNow end?