I have these permissions on a service account:
1. With this service account's clientId and clientSecret, I call GET https://login.microsoftonline.com/<tenantId>/oauth2/v2.0/token to get an access_token.
2. I use this access_token to call POST https://<domain>.sharepoint.com/sites/<siteCollection>/_api/web but get a 401.
{
"error_description": "Exception of type 'Microsoft.IdentityModel.Tokens.AudienceUriValidationFailedException' was thrown."
}So I have two questions:
1. Do I not have the right permissions? The Sites.Selected should include the <sitecollection>.
2. What permissions do I need to get a 200?