Skip to main content
Question

Oauth integration scopes

  • March 30, 2026
  • 1 reply
  • 12 views

truthanb

I’ve made a private oauth app to access resources. Only shared resources. I’ve limited the resource permissions to a pretty vanilla degree. However, whenever someone in my company tries to authorize the app, if they are not an admin then they cannot proceed.

Is this expected, or am I doing it wrong? 

1 reply

Javier - Developer Relations
Forum|alt.badge.img+9

Hi ​@truthanb,

 

This is expected because OAuth scopes are granted across the company instance rather than at a user level. I’ve added notes to the documentation to make this clear—thanks for highlighting that this was missing.

Let us know if you have any further questions!