Request only necessary scopes

-Use cloud_controller_service_permissions.read instead of
cloud_controller.read

[#70323546]