I’ve made a private oauth app to access resources. Only shared resources. I’ve limited the resource permissions to a pretty vanilla degree. However, whenever someone in my company tries to authorize the app, if they are not an admin then they cannot proceed.
Is this expected, or am I doing it wrong?
Hi
This is expected because OAuth scopes are granted across the company instance rather than at a user level. I’ve added notes to the documentation to make this clear—thanks for highlighting that this was missing.
Let us know if you have any further questions!
P.S. We will likely expose user-based OAuth permissions in a future update.
No account yet? Create an account
Enter your E-mail address. We'll send you an e-mail with instructions to reset your password.