REST API Authentication with Oracle Fusion Cloud EPM

The documentation (found here: ) says that we must select Identity Domain Administrator when configuring the token issuance policy. Granting the application Identity Domain Administrator role is a security risk with it having too much privilege. Can we reduce the scope to something like "Sign-In" instead of full-on domain admin?

• In the Token Issuance policy section:Enable Add app roles.Click the Add roles button.Choose Identity Domain Administrator on the slide-in dialog box.Click the Add button to close the slide-in dialog box.