What are the scopes for PAT_Token

[apopaa]

In https://github.com/microsoft/azure-pipelines-agent/tree/master/tools/FindPipelinesUsingRetiredImages, what are the custom scopes I should give to my PAT_Token?
Atm I'm using this "Agent Pools (Read); Auditing (Read Audit Log); Build (Read); Code (Read); Pipeline Resources (Use); Release (Read); Work Items (Read)" and it seems to work. But ... is that enough?
Thank you.

[aaronpburke]

That's probably over-scoped, but I came here looking for the same answer and that configuration worked for me 🤷‍♂️

[aaronpburke]

CC @tkasparek as the last editor of the script

[monicaro-gh]

This set doesn't work for me and I am getting Unauthorized. Even with choosing a bunch more I can't get the script to work. Suggestions?