Please help.

I have set up both a Native and Server-Side application and both given Tenant API permission for Tenant.Read.All and Tenant.ReadWrite.All and also Granted Admin Consent on behalf of my organization. But when I request an access, Token.Read.All and Token.ReadWrite.All does not show up in the scope adn when I try to even use the access token given to me to call Groups GetGroupsAsAdmin through the REST API I get a 401 error. I am a global admin for my organization as well.

What am I doing wrong??