I would like to share this information with all of you
Issue Summary:
if you are calling the Business Central REST API via OAuth2 authentication fails with the error message "Web service call failed because user could not be authenticated or authorized."
and in the event viewer, you got this warning
RCA:
When you create the APP reg in the Azure portal and add the needed params to your postman or any tool that you used to generate the token, the token is generated correctly
If you take this token and use this link: JSON Web Tokens - jwt.io
This link is very helpful to show you the token data added so you will find it missing an important part which is ( Roles )
This issue related to the wrong scope added to the request being wrong
It should be https://api.businesscentral.dynamics.com/.default