I've followed a few other discussions on this forum to the conclusion that my current error message ('insufficient scope to perform the operation' etc.) is likely due to a lack of permissions on behalf of the user account which authorized the auth token being used.
May I ask what our FE NXT admin user would need to do to permit an account to authorize a token that can access that endpoint?
Alternatively, am I mistaken in my understanding of the problem?