Thanks for the help. It seems that the easiest to assign permissions and roles is through the dashboard then? I don’t think I need to do any of the use cases you outlined above with the Management API. The extra scopes not offered by the SPA tokens, such as update:users, or read:roles, I can probably do through the dashboard?
Also, I have visited the page “get management API tokens for SPA” many times, but it only offers ways to do so manually and for testing. How do I get tokens automatically? Do I use the react SDK and getAccessTokensSilently() function? Thanks!