In case the scopes specified in this ask for span a number of source server, then the Microsoft id platform returns a token with the source laid out in the initial scope. For more information, see Permissions and consent in the Microsoft id System.Access to ' tenant ' tenant is denied. AADSTS500021 suggests the tenant restriction characteristic is