I need to be able to get more details on how this method works:

com.pega.pegarules.priv.util.ServiceUtilsPrivgetOAuth2Client(tools, authProfilePage, operatorId).getAccessToken();

I need to know how this method works in details in order to understand how the token is associated to the operator. Pega have a lack of information on that, and now that I need to check if the token is valid for an application their OOTB solution just check the token if there is a operatorid, the token must need to be checked only for the application if the application have a valid token I dont need to check if the operator have a valid token, it is an application scope not operator scope. And all the rules involved in this process have their availability set to final, which in my point of view should not be set as final, because there is a gap in this design. They need to think OOTB too.