Using Azure AD access token for non Microsoft Graph API
See here. They key is that the scopes
array should have a single element with: "<YourClientId>/.default.
When following the example here, make sure to replace
the scopes with "<YourClientId>/.default.