IDCS REST API read-only access

Summary:

There are no app role grant reports in the OCI or IDCS portals, so there is not a way to get a report of all Identity Domain Administrators, Security Administrators, User Administrators, etc. without manually click on each user and checking their roles (very inefficient and no very auditable from an access review standpoint). So we are looking into using the IDCS REST APIs to create a report. To do this, since IDCS requires oAuth authentication, we setup an IDCS Confidential Application. However, there is no option to grant read-only access to these APIs, which isn't