Whenever I try to create a user from Azure AD spoke. I get this error: " Forbidden Request. Please Check Oauth Token and scope permission."

[Roy13]

Hello, 

I followed this (https://youtu.be/JOUBcINNF9g) tutorial to setup my Azure AD spoke. but whenever I try to push a user from ServiceNow to Azure Ad it gives me the following error: "Forbidden Request. Please Check Oauth Token and scope permission."

Everything that I have created is in the Microsoft Azure AD spoke Scope. And my Oauth token is also valid has anyone else encountered this error before? 

[Sravani36]

Hi, for the above error it's nothing to do from ServiceNow. Inform your Azure team to give some  user.Readwrite.All permissions and some other for the app so that allows you to add this user in the group

[Iguana]

Hi,

in our case it helped with enabling option "Microsoft Entra roles can be assigned to the group" in Azure.