App access tokens do not represent a user
App access tokens (basically for twitch) cannot have scopes
First you create a user token for the broadcaster_id you want to subscribe to with the relevant scopes.
Then use your App access token (with no scopes)
To subscribe to the topic
I wrote about this two legged approach here How does Twitch’s new EventSub work? – Barry Carlyon