What are the scopes for PAT_Token

[apopaa]

In https://github.com/microsoft/azure-pipelines-agent/tree/master/tools/FindPipelinesUsingRetiredImages, what are the custom scopes I should give to my PAT_Token?
Atm I'm using this "Agent Pools (Read); Auditing (Read Audit Log); Build (Read); Code (Read); Pipeline Resources (Use); Release (Read); Work Items (Read)" and it seems to work. But ... is that enough?
Thank you.

[aaronpburke]

That's probably over-scoped, but I came here looking for the same answer and that configuration worked for me 🤷‍♂️

[aaronpburke]

CC @tkasparek as the last editor of the script