There should be an option where the scopes selected for the service account credentials should be visible on the UI. This feature will help reducing the admin overhead in maintaining the scope data on their end and it would also help in re-creation of the scopes for the tokens that are about to expired.