The REST location resource requires locations scope

As of the 2024-10 release of the Admin REST API, the location resource will be gated by the locations scope.

Attempting to access the location resource without the read_locations scope will return a 403 Forbidden error. If your app gets the location resource, then you will need to request the correct read_locations scope before migrating to the 2024-10 API version.