From f766bd634f84dbbca7cef55b551438c9dd63f69f Mon Sep 17 00:00:00 2001
From: mikep11 <35440235+mikep11@users.noreply.github.com>
Date: Fri, 6 Feb 2026 11:02:47 -0500
Subject: [PATCH] Update requested scopes in auth_azure_ad_oauth.py

Fixes Issue #807 by adding "User.Read" to the scopes requested.
---
 src/auth/auth_azure_ad_oauth.py | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/src/auth/auth_azure_ad_oauth.py b/src/auth/auth_azure_ad_oauth.py
index 5696e634..5b1a940f 100644
--- a/src/auth/auth_azure_ad_oauth.py
+++ b/src/auth/auth_azure_ad_oauth.py
@@ -17,7 +17,7 @@ def __init__(self, params_dict):
         super().__init__(
             self.auth_url,
             self.token_url,
-            'openid email profile',
+            'openid email profile User.Read',
             params_dict,
         )