We read
admin.apps:readEnumerate installed apps and custom integrationsadmin.users:readResolve workspace users for app authorization mappingauditlogs:readStream workspace audit log events (Enterprise Grid)team:readIdentify the workspace and team metadata