How to add scope for specific application?

Help
1

Trying to get token to access management api refer the decoded token attached below. I am able to access management api using trail account , but facing issue in official account. Scope is not present in decoded token. How do I add scope as part of access token via dashboard?
// decoded token from the trail account

{
  "iss": "https://domain/",
  "sub": "w3HiLAM2UWqBAsAi3ubHM8pgdf1wLnaq@clients",
  "aud": "https://domain/api/v2/",
  "iat": 1650458484,
  "exp": 1650544884,
  "azp": "dbsddjsfbjkkkkkkkkkkkkk",
  "scope": "read:client_grants create:client_grants delete:client_grants update:client_grants read:users update:users delete:users create:users read:users_app_metadata update:users_app_metadata delete:users_app_metadata create:users_app_metadata read:user_custom_blocks create:user_custom_blocks delete:user_custom_blocks create:user_tickets read:clients update:clients delete:clients create:clients read:client_keys update:client_keys delete:client_keys create:client_keys read:connections update:connections delete:connections create:connections read:resource_servers update:resource_servers delete:resource_servers create:resource_servers read:device_credentials update:device_credentials delete:device_credentials create:device_credentials read:rules update:rules delete:rules create:rules read:rules_configs update:rules_configs delete:rules_configs read:hooks update:hooks delete:hooks create:hooks read:actions update:actions delete:actions create:actions read:email_provider update:email_provider delete:email_provider create:email_provider blacklist:tokens read:stats read:insights read:tenant_settings update:tenant_settings read:logs read:logs_users read:shields create:shields update:shields delete:shields read:anomaly_blocks delete:anomaly_blocks update:triggers read:triggers read:grants delete:grants read:guardian_factors update:guardian_factors read:guardian_enrollments delete:guardian_enrollments create:guardian_enrollment_tickets read:user_idp_tokens create:passwords_checking_job delete:passwords_checking_job read:custom_domains delete:custom_domains create:custom_domains update:custom_domains read:email_templates create:email_templates update:email_templates read:mfa_policies update:mfa_policies read:roles create:roles delete:roles update:roles read:prompts update:prompts read:branding update:branding delete:branding read:log_streams create:log_streams delete:log_streams update:log_streams create:signing_keys read:signing_keys update:signing_keys read:limits update:limits create:role_members read:role_members delete:role_members read:entitlements read:attack_protection update:attack_protection read:organizations_summary read:organizations update:organizations create:organizations delete:organizations create:organization_members read:organization_members delete:organization_members create:organization_connections read:organization_connections update:organization_connections delete:organization_connections create:organization_member_roles read:organization_member_roles delete:organization_member_roles create:organization_invitations read:organization_invitations delete:organization_invitations",
  "gty": "client-credentials"
}

// decode token from official account

{
  "iss": "https://domain/",
  "sub": "cvcshchfbhb@clients",
  "aud": "https://domain/api/v2/",
  "iat": 1650458592,
  "exp": 1650544992,
  "azp": "dbsdsdj",
  "gty": "client-credentials"
}
3

Hi @selvi,

You can find the applications permissions/scopes in the API settings in the Dashboard.

image
image1671×1155 167 KB

Let me know if you have trouble finding it.

1 Like