a) more clarity: scopes must be always defined. Use uid pseudo scope in case no API permissions are needed (green or yellow), or endpoint protection is done differently w/o permissions
b) delete repetition of uid usage in the same rule below
c) move scope examples to the rule below defining the scope naming convention
a) more clarity: scopes must be always defined. Use uid pseudo scope in case no API permissions are needed (green or yellow), or endpoint protection is done differently w/o permissions b) delete repetition of uid usage in the same rule below c) move scope examples to the rule below defining the scope naming convention