By default, each PAT has the scope, sp:scopes:all , which grants access to all the rights appropriate for the user level. For example, if your user is an Admin, then the default is full permission to the API. If your user is a Cert Admin, then the default is access to just the endpoints needed by Cert Admins according to the user level matrix.
1 Like