Per service app, I’m building a service app(a backend daemon) which calls okta management-api to sync all users in okta.
It’s easy to understand that I MUST assign an “Admin Role” to get all users, but I dont’ understand why I have to grant scope of “okta.users.read” ? because it is already an “Admin”
plese help clarify, thanks