Skip to content

Glossary: Monitoring Tools and the Identity Life Cycle

Scope

Also written: scopes

A specific permission carried by an OAuth access token, such as "read orders" but not "issue refunds". Least privilege applies to scopes too.

Where the book teaches it

Related terms

Access tokenOAuth (Open Authorization)Consent phishing