AADSTS9010010: The resource parameter provided in the request doesn't match with the requested scopes for REST callsIssue <!-- /*NS Branding Styles*/ --> .ns-kb-css-body-editor-container { p { font-size: 12pt; font-family: Lato; color: var(--now-color--text-primary, #000000); } span { font-size: 12pt; font-family: Lato; color: var(--now-color--text-primary, #000000); } h2 { font-size: 24pt; font-family: Lato; color: var(--now-color--text-primary, black); } h3 { font-size: 18pt; font-family: Lato; color: var(--now-color--text-primary, black); } h4 { font-size: 14pt; font-family: Lato; color: var(--now-color--text-primary, black); } a { font-size: 12pt; font-family: Lato; color: var(--now-color--link-primary, #00718F); } a:hover { font-size: 12pt; color: var(--now-color--link-primary, #024F69); } a:target { font-size: 12pt; color: var(--now-color--link-primary, #032D42); } a:visited { font-size: 12pt; color: var(--now-color--link-primary, #00718f); } ul { font-size: 12pt; font-family: Lato; } li { font-size: 12pt; font-family: Lato; } img { display: ; max-width: ; width: ; height: ; } } When testing a REST message via REST Messages, the following error is returned: User is not authenticated. Could not retrieve a new access token with the refresh token.invalid_target, AADSTS9010010:The resource parameter provided in the request doesn't match with the requested resource. Release<!-- /*NS Branding Styles*/ --> .ns-kb-css-body-editor-container { p { font-size: 12pt; font-family: Lato; color: var(--now-color--text-primary, #000000); } span { font-size: 12pt; font-family: Lato; color: var(--now-color--text-primary, #000000); } h2 { font-size: 24pt; font-family: Lato; color: var(--now-color--text-primary, black); } h3 { font-size: 18pt; font-family: Lato; color: var(--now-color--text-primary, black); } h4 { font-size: 14pt; font-family: Lato; color: var(--now-color--text-primary, black); } a { font-size: 12pt; font-family: Lato; color: var(--now-color--link-primary, #00718F); } a:hover { font-size: 12pt; color: var(--now-color--link-primary, #024F69); } a:target { font-size: 12pt; color: var(--now-color--link-primary, #032D42); } a:visited { font-size: 12pt; color: var(--now-color--link-primary, #00718f); } ul { font-size: 12pt; font-family: Lato; } li { font-size: 12pt; font-family: Lato; } img { display: ; max-width: ; width: ; height: ; } } All Resolution<!-- /*NS Branding Styles*/ --> .ns-kb-css-body-editor-container { p { font-size: 12pt; font-family: Lato; color: var(--now-color--text-primary, #000000); } span { font-size: 12pt; font-family: Lato; color: var(--now-color--text-primary, #000000); } h2 { font-size: 24pt; font-family: Lato; color: var(--now-color--text-primary, black); } h3 { font-size: 18pt; font-family: Lato; color: var(--now-color--text-primary, black); } h4 { font-size: 14pt; font-family: Lato; color: var(--now-color--text-primary, black); } a { font-size: 12pt; font-family: Lato; color: var(--now-color--link-primary, #00718F); } a:hover { font-size: 12pt; color: var(--now-color--link-primary, #024F69); } a:target { font-size: 12pt; color: var(--now-color--link-primary, #032D42); } a:visited { font-size: 12pt; color: var(--now-color--link-primary, #00718f); } ul { font-size: 12pt; font-family: Lato; } li { font-size: 12pt; font-family: Lato; } img { display: ; max-width: ; width: ; height: ; } } With glide.rest.debug enabled, the logs show that the resource points to a resource that does not exist in the OAuth Profile. In this case it is management.azure.com. DEBUG LOG — glide.rest.debug DebugLogger DEBUG: OAUTH - OAuthClient : Sending http request, body: grant_type=client_credentials&resource=https%3A%2F%2Fmanagement.azure.com&scope=https%3A%2F%2Fgraph.microsoft.com%2F.default&client_secret=xxxx&client_id=xxxx 2026-09-03 02:05:13 (468) Default-thread-35 txid=eb09e71ac3cb DebugLogger DEBUG: OAUTH - OAuthClient : Received http response: 2026-09-03 02:05:13 (469) Default-thread-35 txid=eb09e71ac3cb OAuthTokenRequestor OAuthProblemException{error='invalid_target', description='AADSTS9010010: The resource parameter provided in the request doesn't match with the requested scopes. Trace ID: babe5b25-... Correlation ID: 49c7c990-... Timestamp: 2026-09-03 09:05:13Z', responseStatus=0, parameters={}} 2026-09-03 02:05:13 (469) Default-thread-35 txid=eb09e71ac3cb OAuthTokenRequestor *** WARNING *** failed to get access token from remote oauth server. Note the mismatch: the request sends resource = management.azure.com while the scope targets graph.microsoft.com. Check whether the out-of-box script include OAuthUtils has been customised: https://<yourinstance>.service-now.com/nav_to.do?uri=sys_script_include.do?sys_id=3e3a3a11c333210016194ffe5bba8f70 ServiceNow assembles the base parameters from the Application Registry and the OAuth Entity Profile: grant_type, client_id, client_secret, scope, and token URL. Before sending, it calls the script named in the OAuth API Script field on the oauth_entity record. If that field is empty, the OOB global OAuthUtil runs. Do not customise OAuthUtil. It is used platform-wide. If custom logic is required, extend it and reference the extended script in your implementation instead.