When getting Managed Identity tokens with Get-AzPasswords and AKS clusters, the token is currently scoped to management.azure.com. It would be helpful to have additional services as scopes that could be selected as parameters.
Lines 800-824 cover the Managed Identity token generation in Get-AzPasswords.