t to the dashboard is considered equivalent to clicking
    &#39;accept&#39; in the dialog of the application-first flow. Removing one
    is considered equivalent to revoking its access token.

    As an equivalent to OAuth&#39;s &#39;scope&#39; parameter, a &#39;datastores-access&#39;
    field SHOULD be present in the root of such an application manifest
    document, with entries &lt;module&gt; -&gt; &#39;{&#34;access&#34;: &#34;readonly&#34;}&#39; for
    &lt;level&gt; &#39;r&#39; or &#39;{&#34;access&