If it helps to have a visual, these are the permissions I have enabled and I haven’t run into any problems so far. I’ll update the post if that changes.
Not sure I need the sells scopes, but there was another thread that made it sound like I did.
I also noticed there is a wallet:orders:refund scope. A little digging and I realized they have a whole commerce API for storefront integration etc. I’m guessing the orders scopes have something to do with that. Creating an order for a customer. In that context, it kinda makes sense again.