scope is set as
user:write:admin user:read:admin imgroup:read:admin imgroup:write:admin contact_group:write:admin contact_group:read:admin and this seems ok.
Thanks for your advice.
Actually, I’m using kind of RPA named Kofax and not writing curl.
What I did is just replace “users” with “groups” at the end of the endpoint.
Everything except users/groups is set in the same but I get 400 bad request only from groups.
Could you please give me further advice? Thank you