Creating a way for people to buy addons through an embeded app and the post request is returning permission error, however according to the api documentation I have the required permissions.

Scope: {"scope":["ZohoCRM.modules.ALL","ZohoSubscriptions.plans.READ","ZohoSubscriptions.products.READ","ZohoSubscriptions.addons.READ","ZohoSubscriptions.hostedpages.READ","ZohoSubscriptions.subscriptions.READ","ZohoSubscriptions.subscriptions.CREATE"],

what am i missing here?