How to make access token valid for management API calls?

[jmangelo]

The recommendation for most cases would be to use the custom claims approach in rules; can you clarify if you tried it and you could not get the info on the token or you tried and although it worked it did not meet your requirements. If it’s the former then update the question with the sample rule code, if the latter then state what requirements could not be met with the custom claims approach.