Oauth integration scopes

1 reply
160 views

I’ve made a private oauth app to access resources. Only shared resources. I’ve limited the resource permissions to a pretty vanilla degree. However, whenever someone in my company tries to authorize the app, if they are not an admin then they cannot proceed.

Is this expected, or am I doing it wrong?

Javier - Developer RelationsAnswer

Community Manager

Hi @truthanb,

This is expected because OAuth scopes are granted across the company instance rather than at a user level. I’ve added notes to the documentation to make this clear—thanks for highlighting that this was missing.

Let us know if you have any further questions!

P.S. We will likely expose user-based OAuth permissions in a future update.

Javier - Front Developer Relations