When the scopes specified in this request span many resource server, then the Microsoft id System returns a token to the useful resource laid out in the primary scope. For more information, see Permissions and consent within the Microsoft id System.Usage of ' tenant ' tenant is denied. AADSTS500021 suggests that the tenant restriction feature is co