In the documentation, https://docs.kinde.com/kinde-apis/management/#tag/users/get/api/v1/users/{user_id}/mfa, it indicates the scope is get:user_mfa. However, when using the admin site, it appears to be read:user_mfa. I have attached screen shots to illustrate. The black background image is the documentation. The white background image is the admin website.
