add scopes for read and update access