`That client will be scoped, to that user so the client application will *NOT* have tenant administrator privileges.`

This is misleading. It should read:

`The access associated to that client will be the full access of the user for which you've created the client.`