[FEATURE] Limit Auth0ManagementClientSecret scopes

**Is your feature request related to a problem? Please describe.**
We use the Auth0 management client API to update users in the Auth0 tenant. However the client is believed not setup with least privilege and therefore we should look to limit the scopes that can be performed by the API so that it can only update users and not perform any other tasks

**Describe the solution you'd like**
Limited scopes so that updating users is the only action

**Describe alternatives you've considered**
None

**Additional context**