Hi @ahsath
This seems fine to me. To be clear:
User A is not an admin and has the update:users scope. They are allowed to update users, but because they don’t have the admin claim they can only update their user.
User B is an admin, they have the update:users scope. They are allowed to update any user.
John