PoP Token

Host: Path (will be lowercased): Http Verb (insensitive):

PAS token

PAS tokens are a pain to generate without a pre-approved spn with user_impersonate. Our team doesn't have one of those, but Portal and Azure CLI team does - more context.

So let's use Azure CLI:

1. az login --scope "https://pas.windows.net/.default"
2. az account get-access-token --resource "https://pas.windows.net" --query accessToken -o tsv