Scopes [hcp.readAuthorizationSettings, hcp.manageAuthorizationSettings] exceed the scope granted by the resource owner

Hi,

I'm going to manager roles and users using Authorization Management API. I follow the instruction at Using the Authorization Management REST API but I'm having the following error when I try to get access token:

https://...hanatrial.ondemand.com/oauth2/api/v1/token?grant_type=client_credentials&scope=hcp.readAuthorizationSettings,hcp.manageAuthorizationSettings

   {"error": "invalid_scope",

     "error_description": "Scopes [hcp.readAuthorizationSettings, hcp.manageAuthorizationSettings] exceed the scope granted by the resource                                             owner"

   }

I'm able to get access token if  the "scope" parameter is removed from the url. However, I'll get 401 error if I use that access token to access any Authorization Management API.

I spent half a day on this but still no luck. Please advice me if anyone knows what causes the issue.

Many thanks,

Liang