Skip to main content
Solved

Oauth integration scopes

  • March 30, 2026
  • 1 reply
  • 20 views

truthanb

I’ve made a private oauth app to access resources. Only shared resources. I’ve limited the resource permissions to a pretty vanilla degree. However, whenever someone in my company tries to authorize the app, if they are not an admin then they cannot proceed.

Is this expected, or am I doing it wrong? 

Best answer by Javier - Developer Relations

Hi ​@truthanb,

 

This is expected because OAuth scopes are granted across the company instance rather than at a user level. I’ve added notes to the documentation to make this clear—thanks for highlighting that this was missing.

Let us know if you have any further questions!

 

P.S. We will likely expose user-based OAuth permissions in a future update.

1 reply

Javier - Developer Relations
Forum|alt.badge.img+9

Hi ​@truthanb,

 

This is expected because OAuth scopes are granted across the company instance rather than at a user level. I’ve added notes to the documentation to make this clear—thanks for highlighting that this was missing.

Let us know if you have any further questions!

 

P.S. We will likely expose user-based OAuth permissions in a future update.