Permission denied issue

[kwicken]

I am developing an application using the Developer account of Adobe Sign. I'm trying to manage users  and I was able to get/create users but I'm getting a permission denied issue when trying to update a user that has been created. The folloing images shows my apps enabled scopes

The requested scopes are user_read:account+user_write:account and here's a curl command of the request I'm making

curl --location --request PUT 'https://secure.na2.echosign.com/api/rest/v5/users/3AAABLblqZhABXYAUtR7IMFub4C36ml-NeytlVD1a1Z830OxXFs_fnuxJ4mKeeD1SnF9KSXOaYjJ55e1LtnQnJ0ifXcHd0y1j' \
--header 'Content-Type: application/json' \
--header 'Authorization: Bearer REDACTED:)' \
--data-raw '{
  "email": "wickenk+test2@gmail.com",
  "firstName": "Owen",
  "lastName":"Wicken",
  "groupId": "3AAABLblqZhBg4wwvtvLGE668ha7SF5aAecU0jPrlex2D1hwO6AAao_1aGuickwTmuz0-k0bJcRzSQ6r-L3xkhoHGEVvZ3LHK",
  "roles": ["NORMAL_USER"]
}'

and I'm receiving a 

403 Permission Denied

{
    "code": "PERMISSION_DENIED",
    "message": "The API caller does not have the permission to execute this operation"
}

Am I using the wrong scopes or is my request formatted incorrectly in some way?

Thanks