Customer API scopes

What this does

Scopes limit what an application token can access in addition to tenant and location authorization.

Steps

1. List the operations your integration actually needs.
2. Select the corresponding scopes when creating or editing the application.
3. Keep location access as narrow as possible.
4. Issue new credentials when the security boundary changes.
5. Verify denied operations fail safely.

What happens next

Your change is available within the scope you selected.

Related articles