Management API get token throws "User is not authorized to the audience for those scopes"

[mathiasconradt]

Please see my comment in this thread, it’s very similar:

Both spa and auth.js SDKs in a React app

Ok, I see. So, you just want to update user_metadata, none of the root attributes (email, name, etc.). Available scopes are limited as per your linked docs You can ask for the following scopes: read:current_user update:current_user_identities create:current_user_metadata update:current_user_metadata delete:current_user_metadata … so, for example, scope update:users isn’t. Yes, I guess then it should be possible. TBH I haven’t tested it out myself yet with the older Auth0.js. but wit…

But when I try to get the access token with “read:users” scope using a username/password and client id/secret from the Web App

Can you specify which grant type (Authorization Code Grant, Resource Owner Password Grant, etc.) you’re using?

If you’re not using Client Credentials Grant (M2M) but requesting it on behalf of a user, which I assume, the scopes you can request are limited, as per my linked thread above.