After retrieving the platform resource ID in Step 7 and the scope ID that you need in Step 8, you can use the POST /environments/{{envID}}/applications/{{appID}}/grants operation to create a new resource access grant for the application.

The body of the request specifies the ID for the resource property (PingOne API) and the ID for the PingOne scope that you will assign to the application resource grant (p1:read:user).

The response data shows the resource grant ID and the scope associated with the grant.