Hello, @Qian, Matthew , with my test, I found that the error is caused when the scope parameter in the authorization request contains permissions that require admin consent. So check whether the scope parameter in your code contains permissions that require administrator consent.
If the answer is helpful, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".
Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.