Hi Colin,
I can confirm that I’m also now seeing the behaviour you’ve described - I need sp:scopes:all, where when I was testing the other day prior to making the post I was able to perform the file upload/aggregation with the combination of the previously mentioned scopes:
idn:sources:manage
idn:accounts-state:manage
I had created three separate brand new accounts as part of work to move my connectors using the new endpoint to a least-privilege set of permissions (since this was not available when we originally implemented), so I’m very confident that it was working with those permissions at that time.
It’s worth noting that this shows that there has been a change to the endpoint without any notification, less than two weeks prior to the deprecation of the old endpoint - exactly why I previously raised my concerns about the replacement for a production endpoint being a /beta endpoint.