Azure OpenAI Service OAuth Scopes

OAuth 2.0 derived

Azure OpenAI Service publishes 1 OAuth 2.0 scope via the clientCredentials flow. Scopes are the fine-grained permissions an application requests at authorization time to act against the Azure OpenAI Service API on a user’s behalf.

Tokens are issued from https://login.microsoftonline.com/common/oauth2/v2.0/token.

This index is generated from the provider’s OpenAPI security definitions (and, where available, its documented scope reference) and refreshes on every APIs.io network build. Browse every provider’s scopes at scopes.apis.io.

AILLMGenerative AIAzureOpenAIFoundation ModelsChat CompletionsEmbeddings

Scopes: 1 Flows: clientCredentials Method: derived

OAuth endpoints

Token URL
https://login.microsoftonline.com/common/oauth2/v2.0/token

Flows
clientCredentials

Scopes (1)

Scope	Description	Flows
https://cognitiveservices.azure.com/.default	Azure Cognitive Services data plane	clientCredentials

📄 Provider scope reference:

Source

OAuth Scopes

generated: '2026-07-11'
method: derived
source: openapi/azure-openai-openapi.yml
schemes:
- name: entra
  source: openapi/azure-openai-openapi.yml
  flows:
  - flow: clientCredentials
    tokenUrl: https://login.microsoftonline.com/common/oauth2/v2.0/token
  description: Microsoft Entra ID OAuth 2.0 bearer token
scopes:
- scope: https://cognitiveservices.azure.com/.default
  description: Azure Cognitive Services data plane
  flows:
  - clientCredentials
  sources:
  - openapi/azure-openai-openapi.yml