I am trying to build a connected app- connected to our prod environment so that our developers could spin up scratch orgs and work there, however I dont want them to be able to use org:login and change anything. So far the ive tried:
- created a permission set for creating and editing ors and have assigned it to a read only user used to login to the connected app but i cant spin scratch orgs.
- Ive tried limiting the connected apps permissions but i can still use org:login and see into the org.
any suggestion or recommendation is welcomed