From 33b6da0d18cc93fe85e7156005ca93b0b0349e20 Mon Sep 17 00:00:00 2001
From: patrick-motsch
Date: Sun, 15 Feb 2026 15:31:17 +0100
Subject: [PATCH] fix(msft): use delegated OnlineMeetings.Read scope instead of
app-only .Read.All
Co-authored-by: Cursor
---
modules/routes/routeSecurityMsft.py | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/modules/routes/routeSecurityMsft.py b/modules/routes/routeSecurityMsft.py
index face29d4..11d35915 100644
--- a/modules/routes/routeSecurityMsft.py
+++ b/modules/routes/routeSecurityMsft.py
@@ -60,7 +60,7 @@ SCOPES = [
"Files.ReadWrite.All", # Read and write files (SharePoint/OneDrive)
"Sites.ReadWrite.All", # Read and write SharePoint sites
# Teams Bot: Meeting and chat access (requires admin consent)
- "OnlineMeetings.Read.All", # Read Teams meeting details
+ "OnlineMeetings.Read", # Read user's Teams meeting details (delegated scope)
"Chat.ReadWrite", # Read and write Teams chat messages
"ChatMessage.Send", # Send messages to Teams meeting chats
]