unscoped tokens are merely tokens that arent tied to any specific tenant/project.  The minute you need to access a resource within a tenant you need to "scope" it to that tenant in order to do stuff there.  Strictly speaking its an openstack keystone concept not really HP.. However I dislike that value because in my opinion you should know as a developer if a token is unscoped or not ('cause you chose to provide tenant info or not) when you logged in