3655638 - Limit the scope of api-access plan instance to read-only permissions in XSUAA

• When creating a new instance with the apiaccess plan, all scopes are automatically granted ("xs_user.write uaa.resource xs_authorization.read xs_idp.write xs_user.read xs_idp.read xs_authorization.write").
• Attempts to limit the scope to read-only access using additional parameters (e.g., xs-security.json) do not work.
• No error messages are encountered during the process.

SAP BTP, Cloud Foundry runtime and environment

uaa, apiaccess plan, read-only permissions, xs-security.json, scopes, api credential, security settings, access token, authentication, authorization, trust management , KBA , BC-CP-CF-SEC-IAM , UAA, Authentication, Authorization, Trust Mgmnt , Problem