Granting Service User Admin Role

Get the role ID:

curl -G <DOMAIN_URL>/admin/v1/AppRoles \
  -H "Authorization: Bearer <ACCESS_TOKEN>" \
  --data-urlencode 'filter=displayName eq "Identity Domain Administrator"'

Copy <APPROLE_ID> to grant permission:

curl -X POST <DOMAIN_URL>/admin/v1/Grants \
  -H "Authorization: Bearer <ACCESS_TOKEN>" \
  -H "Content-Type: application/scim+json" \
  -d '{
    "schemas": ["urn:ietf:params:scim:schemas:oracle:idcs:Grant"],
    "grantee": { "value": "<USER_ID>", "type": "User" },
    "app": { "value": "IDCSAppId" },
    "entitlement": { "attributeName": "appRoles", "attributeValue": "<APPROLE_ID>" },
    "grantMechanism": "ADMINISTRATOR_TO_USER"
  }'