To allow Opal to access to your Coupa roles and grant permission to assign and remove roles from users, you must first create an OAuth client. Select Client credentials as the Grant type, and set the following scopes:
In Opal, go to Inventory > +App and select Coupa. Name your Coupa app, provide a description, and enter the Client ID and Client Secret from step 1.After you save the app, you can import roles from … > Import items.