Graph API: Either scp or roles claim need to be present in the token
<p>I'm attempting to use MS Graph API to get a list of files/folders from OneDrive for Business.  I've successfully executed the queries I need in Graph Explorer and am now moving on to implementing in my project.</p>

<p>My app is a Windows service, so I'm acquiring a token using <a href="https://graph.microsoft.io/en-us/docs/authorization/app_only" rel="noreferrer">this method</a></p>

<p>I've successfully retrieved a token, but when I "GET" this URL...
<code>//graph.microsoft.com/v1.0/users('someuseraccount')/drive/items/somedriveitem/microsoft.graph.createLink</code></p>

<p>... I get a response back with the error:</p>

<blockquote>
  <p>Either scp or roles claim need to be present in the token.</p>
</blockquote>

<p>My token response from the server is as follows:</p>

<pre><code>{
  "token_type": "Bearer",
  "expires_in": "3600",
  "scope": "Directory.AccessAsUser.All Files.Read Files.Read.Selected Files.ReadWrite Files.ReadWrite.AppFolder Files.ReadWrite.Selected profile Sites.Read.All User.Read",
  "expires_on": "1457343736",
  "not_before": "1457339836",
  "resource": "https://graph.microsoft.com",
  "access_token": "-the token-"
}
</code></pre>