Hi Tara, I read your posts and Mike's SGF paper https://www.sas.com/content/dam/SAS/support/en/sas-global-forum-proceedings/2018/1737-2018.pdf
I am not sure how to interpret the following: see the #

"scope": ["openid", "*"],
"resource_ids": ["none"], # it means I cannot interact with any resources? by default blocked, forbidden
"authorities": ["uaa.admin"], # meaning?
in
curl -sk -X POST "${OAUTH_URL}/clients" \
-H "Content-Type: application/json" \
-H "Authorization: Bearer $OAUTH_TOKEN" \
-d '{
"client_id": "app4",
"client_secret": "secret",
"scope": ["openid", "*"],
"resource_ids": ["none"],
"authorities": ["uaa.admin"],
"authorized_grant_types": ["password","refresh_token"],
"access_token_validity": 600
}'

Thank you for your extra clarification.