diff --git a/plugins/auth-backend-module-microsoft-provider/src/authenticator.test.ts b/plugins/auth-backend-module-microsoft-provider/src/authenticator.test.ts
index 35d35c464c..21a60a229b 100644
--- a/plugins/auth-backend-module-microsoft-provider/src/authenticator.test.ts
+++ b/plugins/auth-backend-module-microsoft-provider/src/authenticator.test.ts
@@ -113,6 +113,7 @@ describe('microsoftAuthenticator', () => {
         tenantId: 'tenantId',
         clientId: 'clientId',
         clientSecret: 'clientSecret',
+        additionalScopes: ['User.Read.All'],
       }),
     });
   });
diff --git a/plugins/auth-backend-module-microsoft-provider/src/module.test.ts b/plugins/auth-backend-module-microsoft-provider/src/module.test.ts
index 21f9a7e845..2ef92c0b44 100644
--- a/plugins/auth-backend-module-microsoft-provider/src/module.test.ts
+++ b/plugins/auth-backend-module-microsoft-provider/src/module.test.ts
@@ -38,6 +38,7 @@ describe('authModuleMicrosoftProvider', () => {
                     clientId: 'my-client-id',
                     clientSecret: 'my-client-secret',
                     tenantId: 'my-tenant-id',
+                    additionalScopes: ['User.Read.All'],
                   },
                 },
               },
@@ -66,7 +67,7 @@ describe('authModuleMicrosoftProvider', () => {
     expect(startUrl.pathname).toBe('/my-tenant-id/oauth2/v2.0/authorize');
     expect(Object.fromEntries(startUrl.searchParams)).toEqual({
       response_type: 'code',
-      scope: 'user.read',
+      scope: 'user.read User.Read.All',
       client_id: 'my-client-id',
       redirect_uri: `http://localhost:${server.port()}/api/auth/microsoft/handler/frame`,
       state: expect.any(String),