- Remove 'roles' from .env.development and .env.production - Remove 'roles' from SeedData.cs - 403 error was caused by requesting unregistered scope - All registered scopes: openid, profile, email, api, offline_access