Invoke-AzRestMethod against Graph API, allow custom scopes?

[JustinGrote]

Is there a way to specify to use custom scopes with Invoke-AzRestMethod against Microsoft Graph API? No reason this shouldn't be possible since apps can dynamically request additional delegated scopes.

❯ Invoke-AzRestMethod "https://graph.microsoft.com/v1.0/roleManagement/directory/roleEligibilitySchedules//filterByCurrentUser(on='principal')?`$expand=principal,roledefinition"                              
Headers    : {[Transfer-Encoding, System.String[]], [Strict-Transport-Security, System.String[]], [request-id, System.String[]], [client-request-id, System.String[]]…}
Version    : 1.1
StatusCode : 403
Method     : GET
Content    : {"error":{"code":"UnknownError","message":"{\"errorCode\":\"PermissionScopeNotGranted\",\"message\":\"Authorization failed due to missing permission scope RoleEligibilitySchedule.Read.Di 
             rectory,RoleEligibilitySchedule.ReadWrite.Directory,RoleEligibilitySchedule.Read.All,RoleEligibilitySchedule.ReadWrite.All,RoleManagement.ReadWrite.Directory,RoleManagement.Read.Director 
             y,RoleManagement.Read.All.\",\"instanceAnnotations\":[]}","innerError":{"date":"2022-05-18T16:02:42","request-id":"4d19c917-2c2c-4265-a4f5-3f6b6f11b276","client-request-id":"4d19c917-2c2 
             c-4265-a4f5-3f6b6f11b276"}}}

I'd like to do some actions without also needing the Graph SDK. Here's the equivalent there:

connect-mggraph -Scopes 'RoleEligibilitySchedule.ReadWrite.Directory','AdministrativeUnit.Read.All'
invoke-MgGraphRequest -method 'get' -uri "https://graph.microsoft.com/v1.0/roleManagement/directory/roleEligibilitySchedules//filterByCurrentUser(on='principal')"

[dingmeng-xue]

@JustinGrote , I'm looking into it and will update to you.

[dingmeng-xue]

@JustinGrote , let's follow up using #14085

[dingmeng-xue]

please go to #14085