Description

I am using O365 CLI with Certificate authN. Even though I assigned proper 'application' permissions (Sites.FullControl), it still fails to execute commands like 'spo site list'.

Steps to reproduce

Once you have an app-only/cert based authN setup for your O365 CLI. Add Sites.FullControl.All application permission.

Then try to run below command:
spo site list

Expected result

See list of sites.

Actual result

Error: 403 AccessDenied Either scp or roles claim need to be present in the token.

Environment

OS: Windows 10 v1909
PS: ver 5.1.18362.752
O365 CLI: 2.12.0