title: List Contacts API with $search param against shared contact folder returns 403 but returns contacts if no $search
body: <p>We're listing contacts in a shared folder using <code>/users/id/contacts?$search=&quot;foo&quot;</code> which returns a 403 on each call.  However, if we drop the <code>$search</code> query parameter the API returns contacts from the shared folder. We are using delegated permissions, and the requested scope is <code>Contacts.ReadWrite.Shared</code>.  Is there some other scope we need in order to be allowed to <em>search</em> the shared folder?</p>