For Adobe I/O project 'EYCOM BMC' I can see there is only 1 product profile 'EYCOM_BMC_API_USER' added to JWT Service for which the user [email protected] already has Analytics product profile access along with Developer access with the same product profile. The reason for mentioning Analytics Product Admin access was because it is Analytics admin access and should cover all the product profiles (which need not be granted separately).