Zus added a managed role, Builder Data Integration, for App Clients that get access tokens on behalf of users, such as EHR integrations or Zus apps embedded in a customer's interface, through the proxy token endpoint. On 14 October that permission was removed from Builder Admin, so only App Clients with the new role can now retrieve tokens for other users.
Our readIt narrows who can act on behalf of clinicians to reach patient records. Zus moved existing integration clients to the new role itself, so most customers need no action; new integration clients must be assigned it.