Should the scopes laid out in this request span a number of source server, then the Microsoft id platform returns a token for that resource laid out in the very first scope. For more info, see Permissions and consent from the Microsoft id platform.Use of ' tenant ' tenant is denied. AADSTS500021 suggests the tenant restriction characteristic is con