# AADSTS50173: The provided grant has expired due to it being revoked, a fresh auth token is needed

**Code:** `AADSTS50173` · **Category:** Azure · **Seen on:** Azure

The refresh token was revoked — usually because the user changed or reset their password, or an admin revoked sessions.

## Meaning

Cached tokens in tools (Azure CLI, VS, Teams, Outlook, PowerShell) stop working after a password change. Signing in again issues a fresh token.

## Common causes

- User changed/reset password
- Admin revoked sessions
- Token revoked by risk policy

## Quick fix

1. Sign out and sign in again (az logout / az login)
2. Clear cached accounts in the tool
3. For services, re-authenticate the stored credential

## Detailed fix by platform

### Azure CLI

1. 

```bash
az logout
az account clear
az login
```


## How to diagnose

1. **Event** — Recent password change/revocation?
2. **Tool** — Which client caches the token?

---
Source: [WhatIsMyError](https://whatismyerror.com/errors/azure/aadsts50173-grant-expired-password-change)