Adding some comments for more information

sample/confidential_client_certificate_sample.py

@@ -9,11 +9,13 @@
         // https://docs.microsoft.com/en-us/azure/active-directory/develop/v2-oauth2-client-creds-grant-flow#second-case-access-token-request-with-a-certificate"
 
     "thumbprint": "790E... The thumbprint generated by AAD when you upload your public cert",
-    "private_key_file": "filename.pem"
+    "private_key_file": "filename.pem",
         // For information about generating thumbprint and private key file, refer:
         // https://github.com/AzureAD/microsoft-authentication-library-for-python/wiki/Client-Credentials#client-credentials-with-certificate
 
     "endpoint": "https://graph.microsoft.com/v1.0/users"
+        // scope needed for this is User.Read.All from Application permissions which needs admin consent
+        // https://github.com/Azure-Samples/ms-identity-python-daemon/blob/master/2-Call-MsGraph-WithCertificate/README.md
 }
 
 You can then run this sample with a JSON configuration file:

sample/confidential_client_secret_sample.py

@@ -13,7 +13,8 @@
         // https://github.com/AzureAD/microsoft-authentication-library-for-python/wiki/Client-Credentials#registering-client-secrets-using-the-application-registration-portal
 
     "endpoint": "https://graph.microsoft.com/v1.0/users"
-
+        //scope needed for this is User.Read.All from Application permissions which needs admin consent
+        // https://github.com/Azure-Samples/ms-identity-python-daemon/blob/master/1-Call-MsGraph-WithSecret/README.md
 }
 
 You can then run this sample with a JSON configuration file: