title: Insufficient privileges error when trying to access Azure Graph APIs
body: <p>I have set up an Azure AD application that I want to use with my web application.  I have obtained an oAuth token using the following steps:</p>
  
  <p>First I requested my authorization code:</p>
  
  <pre><code>https://login.windows.net/common/oauth2/authorize?redirect_uri={REDIRECT_URI}&amp;client_id={CLIENT_ID}&amp;response_type=code&amp;state=o365&amp;prompt=admin_consent
  </code></pre>
  
  <p>This takes the user to the login.windows.net page where they must accept permissions that my application is going to use on their AD.</p>
  
  <p>After that I get the oAuth Token using this endpoint <a href="https://login.windows.net/common/oauth2/token">https://login.windows.net/common/oauth2/token</a>  with this payload using C#:</p>
  
  <pre><code>{"code": {AUTH_CODE}},
  {"state", {STATE}},
  {"grant_type", "authorization_code"},
  {"redirect_uri", "{REDIRECT_URI}"},
  {"client_id", "1ff78c4b-414f-44c7-834b-09bdae96f440"},
  {"client_secret", "{CLIENT_SECRET}"},
  {"resource", "https://graph.windows.net"}
  </code></pre>
  
  <p>Everything comes back just fine and I get my oAuth Token. However when I try to curl the Graph API using the token I get this error</p>
  
  <pre><code>curl https://graph.windows.net/{tenant}/users?api-version=1.5 -H "Authorization: Bearer [AUTH_TOKEN]"
  
  {"odata.error":{"code":"Authorization_RequestDenied","message":{"lang":"en","value":"Insufficient privileges to complete the operation."}}}
  </code></pre>
  
  <p>I have tried the actual domain for the {tenant}, the "me" alias and the "myorganization" alias and they all don't work. The "me" alias returns an error saying the 'users' resource doesn't exist. I am confused on what the problem is here</p>