Requires accounts:read and accounts:write:all scopes. Optional scope accounts_details:read exposes full account identifiers in the response. Optional scope account_identifiers:masked (when enabled for your API client and included on the token) masks account identifier fields in the response. See Sensitive information.