[cfid-716] Update docs with the authorization rules around SCIM endpoints