Does anybody know what consent scope is required to call the Dynamics 365 Global Discovery Web API (https://globaldisco.crm.dynamics.com/api/discovery/v2.0/) from a SPA?
I'm able to authenticate and call the actual Dynamics 365 Web API but not the globaldiscovery web API because I don't have the correct consent scopes set
Based on the Global Discovery Authentication document, it will finally redirect you to Create an application registration.
The required delegated permission is user_impersonation:
And based on Giving access to Common Data Service:
If your app will use Server-to-Server (S2S) authentication, this step is not required. That configuration requires a specific system user and the operations will be performed by that user account rather than any user that must be authenticated.
