Required Permissions

A Client ID and Client Secret from any active instance on your SAP BTP subaccount with an Identity Authentication (IAG) service subscription.

The technical name for the IAG service is grc-iag-api.