V1 recommended: offline_access User.Read Calendars.ReadWrite
V2 is for accounts where you already have public_client_id + refresh_token.