3355232 - Scopes are missing in OAuth access token for SAP Cloud Management Service APIs

You want to get the OAuth token using password grant flow for SAP Cloud Management Service APIs according to this help document.

Getting an Access Token for SAP Cloud Management Service APIs

You find that the access token only includes limited scopes, for example, "openid user_attributes uaa.user".

As a result, the request to SAP Cloud Management Service APIs fails with 403 forbidden error.

SAP Business Technology Platform

CIS, global account, sub, subaccount, GA, SA, grantType, grant_type, access_token, serviceManagementBinding, clientCredentials, user, password , KBA , BC-NEO-CIS , Commercial Infrastructure , BC-CP-CF-SEC-IAM , UAA, Authentication, Authorization, Trust Mgmnt , Problem