Admin unlocks the /_meta/admin/* diagnostics; the other clients hold
USER only. You can still authorize by hand via POST /auth/token
and the Authorize button.
Something not working? If an endpoint returns something unexpected or a response
does not match the TMF spec, email merrt.topal@gmail.com.
Please include the request you sent, the response you got, and the X-Request-Id
header so the call can be traced.