I have an azure web app with static and dynamic (incrementally) scopes. The static scopes have an admin consent for the whole organization, so these will not bother the end-