title: Sending mail with Office365 & MicrosoftGraph fails with "Forbidden"
body: <p>I downloaded the Office 365 Connect ASP.NET MVC sample code from <a href="http://dev.office.com/code-samples-detail/5985" rel="nofollow">http://dev.office.com/code-samples-detail/5985</a>, registered it as an application in Azure Active Directory (I have Global Administrator rights), gave it the required permissions - 'Sign in and read user profile' and 'Send mail as a user' (no others), and configured web.config with 'ClientID' and 'ClientSecret'. The application allows me to connect with Office 365, but returns "Forbidden" when I attempt to send email.</p>
  
  <p>Using the VS2015 debugger I captured the AccessToken that I received upon login, and decoded it with <a href="http://jwt.calebb.net/" rel="nofollow">http://jwt.calebb.net/</a>. It says the token provides "User.Read" permissions, and that's all.  I understand that the token only provides permissions that are available from both the application and the user credentials used to login to Office 365.  But I have verified using Outlook Web Access that the user credentials do have a mailbox and permission to send email.</p>
  
  <p>So, any thoughts on why I am not getting all the permissions that I configured in AAD?</p>