azure-msgraph-token-endpoint-access-token
OAuth token endpoint responses contain bearer and refresh credentials that commonly leak into logs or automation output. No single Azure RBAC action authorizes this service-native path; its own authentication and authorization apply.
Where it sits
| location | OAuth 2.0 token response.{access_token,refresh_token,id_token} |
|---|
| location kind | output_value |
|---|
| data kinds | credential oauth_token bearer_token session_token |
|---|
| emits edge | ExposesCredential |
|---|
| service | Microsoft Graph (app permissions) (azure:msgraph) |
|---|
Collection recipe
| access mode | data_plane |
|---|
| operation | POST /{tenant}/oauth2/v2.0/token |
|---|
| response path | {access_token,refresh_token,id_token} |
|---|
| encoding | json |
|---|
| params | {"grant_type": "\u003cgrant-type\u003e", "tenant": "\u003ctenant-id\u003e"} |
|---|
References