Updating a user profile with user access token?

After authentication in my SPA, I would like a user to be able to update there user profile information, such as “nick name” or first/last name. I am a bit confused on which access token I need to provide to update the profile. Do I need to provide the user with a management token, or can they use their own access token?

If you use the Org Authorization Server, you can get an access token with the scope ’ okta.myAccount.profile.manage’, which in turn can be used at this endpoint (as a bearer token) to update this specific user’s profile.