Error "Grant type 'password' not allowed for the client." for Resource Owner Password flow

This really is a nightmare. I downloaded the Embedded Login sample. It should come with the variables already filled. It didn’t but that was not much of a problem. The problem was it didn’t work – giving the “grant type…” error in the console. First it doesn’t look like “Patch Client” is in the API anymore as the link takes me to “Update Client”. So I have set the API token and am looking at the “Update Client” API. I mouse over the “update:clients” button and it says “Your token does not permit this scope”. All this because I just wanted to try out the example!!