Azure AD Token Issuing Endpoint doesn't return "scope" parameter
<p>I'm querying the Microsoft Graph using a service app as described in this article: <a href="http://graph.microsoft.io/en-us/docs/authorization/app_only" rel="nofollow">http://graph.microsoft.io/en-us/docs/authorization/app_only</a></p>

<p>I'm successfully able to make the POST request to the tenant-specific URL and get the JSON response specified:</p>

<pre><code>{ 
  "token_type": "Bearer",
  "expires_in": "3599",
  "scope": "User.Read",
  "expires_on": "1449685363",
  "not_before": "1449681463",
  "resource": "https://graph.microsoft.com",
  "access_token": "&lt;token&gt;"
}
</code></pre>

<p>except the "scope" parameter is missing. I have all "Office 365 Exchange Online" "Application Permissions" checked in my AD configuration panel. When using the returned token against the Graph API, I'm able to successfully call <code>https://graph.microsoft.com/v1.0/users/</code> but no other endpoints.</p>