Scoping OAuth client to specific divisions via API?

Trying to build a multi-tenant BPO setup where each client gets its own OAuth scope restricted to their division. The docs for POST /api/v2/oauth/clients mention a divisions array, but I can’t find examples. Is it just { "divisions": ["division-id-1"] }? Getting a 400 on the payload. What’s the exact schema for this field?