products:full and products:read scopes now allow apps to have access to a new endpoint:

• GET products/{id}/permittedUsers - for retrieving the users who are allowed to access a product.

You can read more about the scopes and permission explanations here.

If you wish to update the scopes of an already approved or published app, be sure to learn how changing the scopes will affect your app's existing users.