Hi, I would like to let an external application to run a job using SASJobExecution API. I need a client_credentials flow, but I'm unsure about how to create the client and how to use it.

Here's the client I created so far:

{
"scope": [
"openid"
],
"client_id": "myclient",
"client_secret": "secret",
"resource_ids": [
"none"
],
"authorized_grant_types": [
"client_credentials"
],
"redirect_uri": [
"/"
],
"autoapprove": [
"true"
],
"authorities": [
""
],
"use-sessions": "true"
}

I can successfully get a token using myclient, but then when I use it to run a job in https://sasegpviya.enel.com/SASJobExecution/?_program=xxx I get:
{
"errorCode": "-320",
"message":"The SAS program provided for the job completed execution with at least one error.
Failed to launch process.
Failed to launch process: host=e... port=... ssl=true
Server error: status=0x80BFD100 messages=[ERROR: Access denied.
]"}

I guess because no user is actually mapped to myclient? So how can I allow myclient to run the job?

Moreover, I don't fully understand what these parameters mean: scope, resource_ids, authorities.

The goal would be that the external application authenticates with client/secret (only), and then it can run a specific job (and only that one!).

Can you help me to understand what is the correct way to implement that?

Thank you very much