Demandware OCAPI modify order

a valid user for getting oAuth tokens is a Business Manager user. So please login to Business Manager and create a new user for your use cases and grant the necessary permissions.

After that you are able to execute the particular resources.

Christian