Authorization RPT request access denied

Hi all,

I am new to keycloak, alreadt read all the documents, However I am still cinfused about some things regarding authorization.
The case:
I creates Client name API, under a realm named myrealm.
I created under client roles some roles,
I created under client authorization scopes, policy, resources and permissions.

Now I am getting confused, User X logged In, and get access token. when I am using this access token to send request to get RPT I get
“error”: “access_denied”,
“error_description”: “not_authorized”

What am I doing wrong? what I missed?