Mattermost Login API Scope

Hi there,

is it correct, that Gitlab Mattermost requires the full api permission scope for just logging in?

This is what a users sees:
Screenshot from 2020-03-26 10-56-55

And this is how its configured in the admin interface:

Can someone confirm or deny that it looks the same at their installation?

Thanks a lot and best regards,
Moritz