title: Graph API: Either scp or roles claim need to be present in the token
body: <p>I'm attempting to use MS Graph API to get a list of files/folders from OneDrive for Business.  I've successfully executed the queries I need in Graph Explorer and am now moving on to implementing in my project.</p>
  
  <p>My app is a Windows service, so I'm acquiring a token using <a href="https://graph.microsoft.io/en-us/docs/authorization/app_only" rel="noreferrer">this method</a></p>
  
  <p>I've successfully retrieved a token, but when I "GET" this URL...
  <code>//graph.microsoft.com/v1.0/users('someuseraccount')/drive/items/somedriveitem/microsoft.graph.createLink</code></p>
  
  <p>... I get a response back with the error:</p>
  
  <blockquote>
    <p>Either scp or roles claim need to be present in the token.</p>
  </blockquote>
  
  <p>My token response from the server is as follows:</p>
  
  <pre><code>{
    "token_type": "Bearer",
    "expires_in": "3600",
    "scope": "Directory.AccessAsUser.All Files.Read Files.Read.Selected Files.ReadWrite Files.ReadWrite.AppFolder Files.ReadWrite.Selected profile Sites.Read.All User.Read",
    "expires_on": "1457343736",
    "not_before": "1457339836",
    "resource": "https://graph.microsoft.com",
    "access_token": "-the token-"
  }
  </code></pre>