AADSTS65002: The client application '04b07795-8ddb-461a-bbee-02f9e1bf7b46' is not authorized to request an access token for the resource
What causes it and how to fix it:
- az CLI can't grant Sites.Selected — the scope is blocked by AADSTS65002sites/{id}/permissions needs Sites.FullControl.All; the CLI client can't request it (AADSTS65002), use the Graph PowerShell SDKCause and fix →