title: Microsoft Graph API not able to use mail.read
body: <p>Within my application I generate an access token via</p>
  
  <pre><code>GET https://login.microsoftonline.com/&lt;TENANT_ID&gt;/oauth2/v2.0/authorize?client_id=&lt;CLIENT_ID&gt;&amp;response_type=code&amp;response_mode=query&amp;scope=user.read+mail.send+mail.readwrite&amp;redirect_uri=https%3A%2F%2Fgraphresponse%2F&amp;prompt=consent
  </code></pre>
  
  <p>to use the code on </p>
  
  <pre><code>POST https://login.microsoftonline.com/&lt;TENANT_ID&gt;/oauth2/v2.0/token
  </code></pre>
  
  <p>with <code>application/x-www-form-urlencoded</code>: <code>grant_type=authorization_code&amp;redirect_uri=https%3A%2F%2Fgraphresponse%2F&amp;client_id=&lt;CLIENT_ID&gt;&amp;scope=user.read+mail.send+mail.readwrite&amp;client_secret=&lt;CLIENT_SECRET&gt;&amp;code=&lt;CODE&gt;</code></p>
  
  <p>So far so good, i receive a bearer token like this (formatted for readability): </p>
  
  <pre><code>{"token_type":"Bearer",
   "scope": 
        "Mail.Read Mail.Read.All Mail.Read.Shared 
         Mail.ReadBasic Mail.ReadWrite Mail.ReadWrite.Shared 
         Mail.Send openid User.Read profile email",
   "expires_in":3600,
   "ext_expires_in":3600,
   "access_token":"&lt;TOKEN&gt;"
  }
  </code></pre>
  
  <p>and I can use the following endpoints</p>
  
  <pre><code>GET http://graph.microsoft.com/v1.0/me 
  POST http://graph.microsoft.com/v1.0/me/sendMail 
  POST http://graph.microsoft.com/v1.0/me/messages
  </code></pre>
  
  <p>but I get the following error</p>
  
  <pre><code>GET http://graph.microsoft.com/v1.0/me/messages
  
  {
    "error": {
      "code": "ErrorAccessDenied",
      "message": "Access is denied. Check credentials and try again.",
      "innerError": {
        "request-id": "xxxxxxx",
        "date": "2019-03-12T13:38:47"
      }
    }
  }
  </code></pre>
  
  <p>Did I miss any configuration that is neccessary explicitly to read the current users inbox, or is there any admin configuration required? </p>