Why okta api scopes must be granted for a service app

Per service app, I’m building a service app(a backend daemon) which calls okta management-api to sync all users in okta.

It’s easy to understand that I MUST assign an “Admin Role” to get all users, but I dont’ understand why I have to grant scope of “okta.users.read” ? because it is already an “Admin”

plese help clarify, thanks

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.