3481841 - Attempting to enable CF TCP Routing results in error 'provided scopes [xxx] do not include allowed scopes [network.adminnetwork.write]'

• You are trying to enable the TCP Routing Cloud Foundry feature for BTP (Cloud Foundry TCP Routing)
• You execute the CF CLI command to add a Network Policy e.g: cf add-network-policy <app_name> <destination_app_name> --port <port> --protocol tcp and the following error, or similar is returned:
  error message : Adding network policy from app <destination_app_name> in org <org> / space <space> as <user>
  provided scopes [cloud_controller.read password.write cloud_controller.write openid uaa.user] do not include allowed scopes [network.adminnetwork.write]

• SAP Business Technology Platform
• Cloud Foundry environment

tcp, ip, routing, btp, cli, console, error, permissions, roles, scopes, admin, administrator, global, subaccount, account, network.admin, network.write , KBA , BC-CP-CF-CRTM , Cloud Foundry Container Runtime , BC-CP-CF , Cloud Foundry , Problem