I am trying to add the Mail.Send permission and the Sites.Read permissions to my app, I have granted admin consent for them so they have been approved. However the token roles do not have those roles in them so I keep getting access denied. I have tried adding to Mail.Send to appRoles in the manifest as well with no changes to the token either! Am I missing something simple? Any help would be appreciated.