The correct scope for user authentication is "business-graphql-api:access-group-based", and for service auth it's " business-graphql-service-api:access-group-based". I've seen that some places in the documentation there's references to scopes used for Vismas internal staging environment. Also remember that there's different endpoints for user and service. Use https://business.visma.net/api/graphql for user and https://business.visma.net/api/graphql-service for service auth.
... View more