Weird scope behaviour returned on Azure oAuth2 access token for https://outlook.office365.com/ resource

Hi,

We have two applications in azure active directory, as we need an access token with "user_impersonation" scope exist we have set both of the apps permissions to Office 365 Exchange Online configuration, "Have full access to a users' mailbox" enabled.

But why fetched access token "scope" on both apps are different.

Apps 1 have "user_impersonation" scope returned but Apps 2 only have "full_access_as_user" scope returned.

Can anyone explain the reason?

And how we fix it so both apps have granted access token with "user_impersonation" scope?

Thanks