What are the required API scopes to read data with this tap?

[steven-luabase]

We are hitting this error on the adaccounts stream:
(#200) Requires business_management permission to manage the object (Reason: Forbidden) for path: /v23.0/me/adaccounts

Just wondering what scopes the Oauth user we're authenticating with needs to be able to sync the streams in this tap.