The current publishing guide teaches the user to grant all organization access and all scopes. With Azure DevOps updates, the power granted to the PAT is huge.

We should find a minimum required amount of scopes and guide users to use that, instead of granting all privileges.