Token roles:
  - Mail.ReadWrite
  - User.ReadWrite.All
  - Directory.ReadWrite.All
  - Contacts.ReadWrite
  - Group.ReadWrite.All
  - Calendars.ReadWrite