After retrieving the platform resource ID in Step 2 and the scope IDs in Step 3, you can use the POST /environments/{{envID}}/applications/{{appID}}/grants operation to create a new resource access grant for the application specified by its ID in the request URL.

The body of the request specifies the ID for the resource property (openid) and the ID for the scope that you will assign to the application resource grant.

The response data shows the resource grant ID and the scope associated with the grant.