Dataverse s2s user gets 401 unauthorized (wrong scope I guess)

Question

Currently I'm suffering a problem when trying to access Microsoft Dataverse records. I followed the guide on how to setup postman to access data within dataverse using the implicit OAuth 2.0 authentication flow and it works perfectly.

But I don't need the implicit flow, for my situation the client credentials flow is required. I setup an application user for dataverse and gave it the required security roles. What's interesting, if I authenticate using the implicit grant type, it's not requried to set a specific scope. When I request a token using client credentials it is. So for now I provided https://admin.services.crm.dynamics.com/.default as scope, but I think that's not the required scope for dataverse.

Which scope is required to access the data within dataverse using s2s authentication?