Update user email with API gives insufficient_scope

You need to ensure you have obtained a valid access_token for the Management API, with the correct scopes requested. Take a look at the following document which explains this in further detail: