@cfxlabsinc/b2b-services
    Preparing search index...
    DASHBOARD_OAUTH_SCOPES: readonly [
        "openid",
        "email",
        "profile",
        "aws.cognito.signin.user.admin",
    ] = ...

    Every dashboard client's scopes, admin included: identity, plus the scope that lets a federated login's access token manage its own passkeys.