Should the scopes laid out in this ask for span a number of source server, then the Microsoft identity System returns a token with the resource specified in the very first scope. To find out more, see Permissions and consent in the Microsoft identity System.Access to ' tenant ' tenant is denied. AADSTS500021 signifies the tenant restriction aspect