how to pass correct scope to app registration to query azure management service

HI Team.
I am trying a simple thing but not able to figure out how to set the correct scopes for a service principal.
I want to start and stop a ML compute using rest API. In order to do so, I would need the right token.

below are the steps I have taken :

• create a service principal
• created a Oauth query to get the access token

but I get error that

 {  
    "error": {  
        "code": "InvalidAuthenticationTokenAudience",  
        "message": "The access token has been obtained for wrong audience or resource 'api://{<!-- -->{id}}'. It should exactly match with one of the allowed audiences 'https://management.core.windows.net/','https://management.core.windows.net','https://management.azure.com/','https://management.azure.com'."  
    }  
}  

Now, I am not able to figure out this concept. I have 2 doubts :

1. how to set this scope at the service principal end (in the portal), I dont see any such option and also I am not able to find the documentation.
2. how this access works? even if I give some resource level owner access to a service principal, then do I still have to provide access at scope option of app registration?

Please help in coming out of this issue.