It could be better to check if the accesstoken has included required permissions

https://github.com/code365opensource/microsoft.security.toolkit/blob/600afdfc0c34d3d68ba6cbf15aeac5e7efd3666c/Public/New-SecurityScan.ps1#L29


It is not urgent this time, but should keep in mind of this logic