{"templateId":"markdown","sharedDataIds":{"sidebar":"sidebar-sidebars.yaml"},"props":{"metadata":{"markdoc":{"tagList":[]},"type":"markdown"},"seo":{"title":"OAuth 2.0 Scopes","description":"Okta Developer API Reference","siteUrl":"https://developer.asqula.com","keywords":"okta, api reference docs","lang":"en-US","llmstxt":{"hide":false,"sections":[{"title":"Table of contents","includeFiles":["**/*"],"excludeFiles":[]}],"excludeFiles":[]}},"dynamicMarkdocComponents":[],"compilationErrors":[],"ast":{"$$mdtype":"Tag","name":"article","attributes":{},"children":[{"$$mdtype":"Tag","name":"Heading","attributes":{"level":1,"id":"oauth-20-scopes","__idx":0},"children":["OAuth 2.0 Scopes"]},{"$$mdtype":"Tag","name":"Heading","attributes":{"level":2,"id":"okta-governance-api","__idx":1},"children":["Okta Governance API"]},{"$$mdtype":"Tag","name":"div","attributes":{"className":"md-table-wrapper"},"children":[{"$$mdtype":"Tag","name":"table","attributes":{"className":"md"},"children":[{"$$mdtype":"Tag","name":"thead","attributes":{},"children":[{"$$mdtype":"Tag","name":"tr","attributes":{},"children":[{"$$mdtype":"Tag","name":"th","attributes":{"data-label":"Scope"},"children":["Scope"]},{"$$mdtype":"Tag","name":"th","attributes":{"data-label":"Description"},"children":["Description"]}]}]},{"$$mdtype":"Tag","name":"tbody","attributes":{},"children":[{"$$mdtype":"Tag","name":"tr","attributes":{},"children":[{"$$mdtype":"Tag","name":"td","attributes":{},"children":["okta.governance.accessCertifications.manage"]},{"$$mdtype":"Tag","name":"td","attributes":{},"children":["Allows the app to create and manage Access Certification Campaigns"]}]},{"$$mdtype":"Tag","name":"tr","attributes":{},"children":[{"$$mdtype":"Tag","name":"td","attributes":{},"children":["okta.governance.accessCertifications.read"]},{"$$mdtype":"Tag","name":"td","attributes":{},"children":["Allows the app to read information about Access Certification Campaigns and Reviews in your Okta org"]}]},{"$$mdtype":"Tag","name":"tr","attributes":{},"children":[{"$$mdtype":"Tag","name":"td","attributes":{},"children":["okta.governance.accessRequests.manage"]},{"$$mdtype":"Tag","name":"td","attributes":{},"children":["Allows the app to create and manage V1 Access Requests, Request Types, and Teams"]}]},{"$$mdtype":"Tag","name":"tr","attributes":{},"children":[{"$$mdtype":"Tag","name":"td","attributes":{},"children":["okta.governance.accessRequests.read"]},{"$$mdtype":"Tag","name":"td","attributes":{},"children":["Allows the app to read information about V1 Access Requests, Request Types, and Teams in your Okta org"]}]},{"$$mdtype":"Tag","name":"tr","attributes":{},"children":[{"$$mdtype":"Tag","name":"td","attributes":{},"children":["okta.governance.entitlements.read"]},{"$$mdtype":"Tag","name":"td","attributes":{},"children":["Allows the app to read information about Entitlements, Entitlement bundles, and Grants"]}]},{"$$mdtype":"Tag","name":"tr","attributes":{},"children":[{"$$mdtype":"Tag","name":"td","attributes":{},"children":["okta.governance.entitlements.manage"]},{"$$mdtype":"Tag","name":"td","attributes":{},"children":["Allows the app to create and manage Entitlements, Entitlement bundles, and Grants"]}]},{"$$mdtype":"Tag","name":"tr","attributes":{},"children":[{"$$mdtype":"Tag","name":"td","attributes":{},"children":["okta.accessRequests.catalog.read"]},{"$$mdtype":"Tag","name":"td","attributes":{},"children":["Allows the app to read information about Access Request Catalogs in your Okta org"]}]},{"$$mdtype":"Tag","name":"tr","attributes":{},"children":[{"$$mdtype":"Tag","name":"td","attributes":{},"children":["okta.accessRequests.condition.manage"]},{"$$mdtype":"Tag","name":"td","attributes":{},"children":["Allows the app to create and manage Conditions for the Access Request Resource Catalog"]}]},{"$$mdtype":"Tag","name":"tr","attributes":{},"children":[{"$$mdtype":"Tag","name":"td","attributes":{},"children":["okta.accessRequests.condition.read"]},{"$$mdtype":"Tag","name":"td","attributes":{},"children":["Allows the app to read information about Conditions for the Access Request Resource Catalog"]}]},{"$$mdtype":"Tag","name":"tr","attributes":{},"children":[{"$$mdtype":"Tag","name":"td","attributes":{},"children":["okta.accessRequests.request.manage"]},{"$$mdtype":"Tag","name":"td","attributes":{},"children":["Allows the app to create and manage V2 Access Requests through the Access Request Resource Catalog"]}]},{"$$mdtype":"Tag","name":"tr","attributes":{},"children":[{"$$mdtype":"Tag","name":"td","attributes":{},"children":["okta.accessRequests.request.read"]},{"$$mdtype":"Tag","name":"td","attributes":{},"children":["Allows the app to read information about V2 Access Requests created through the Access Requests Resource Catalog"]}]},{"$$mdtype":"Tag","name":"tr","attributes":{},"children":[{"$$mdtype":"Tag","name":"td","attributes":{},"children":["okta.governance.collections.manage"]},{"$$mdtype":"Tag","name":"td","attributes":{},"children":["Allows the app to create and manage collections"]}]},{"$$mdtype":"Tag","name":"tr","attributes":{},"children":[{"$$mdtype":"Tag","name":"td","attributes":{},"children":["okta.governance.collections.read"]},{"$$mdtype":"Tag","name":"td","attributes":{},"children":["Allows the app to read information about collections in your Okta org"]}]},{"$$mdtype":"Tag","name":"tr","attributes":{},"children":[{"$$mdtype":"Tag","name":"td","attributes":{},"children":["okta.governance.operations.read"]},{"$$mdtype":"Tag","name":"td","attributes":{},"children":["Allows the app to read information about asynchronous operations in your Okta org"]}]},{"$$mdtype":"Tag","name":"tr","attributes":{},"children":[{"$$mdtype":"Tag","name":"td","attributes":{},"children":["okta.governance.riskRule.manage"]},{"$$mdtype":"Tag","name":"td","attributes":{},"children":["Allows the app to create and manage rules"]}]},{"$$mdtype":"Tag","name":"tr","attributes":{},"children":[{"$$mdtype":"Tag","name":"td","attributes":{},"children":["okta.governance.riskRule.read"]},{"$$mdtype":"Tag","name":"td","attributes":{},"children":["Allows the app to read information about rules in your Okta org"]}]},{"$$mdtype":"Tag","name":"tr","attributes":{},"children":[{"$$mdtype":"Tag","name":"td","attributes":{},"children":["okta.governance.resourceOwner.manage"]},{"$$mdtype":"Tag","name":"td","attributes":{},"children":["Allows the app to create and manage resource owners"]}]},{"$$mdtype":"Tag","name":"tr","attributes":{},"children":[{"$$mdtype":"Tag","name":"td","attributes":{},"children":["okta.governance.resourceOwner.read"]},{"$$mdtype":"Tag","name":"td","attributes":{},"children":["Allows the app to read information about resource owners in your Okta org"]}]},{"$$mdtype":"Tag","name":"tr","attributes":{},"children":[{"$$mdtype":"Tag","name":"td","attributes":{},"children":["okta.governance.labels.manage"]},{"$$mdtype":"Tag","name":"td","attributes":{},"children":["Allows the user to create and manage labels"]}]},{"$$mdtype":"Tag","name":"tr","attributes":{},"children":[{"$$mdtype":"Tag","name":"td","attributes":{},"children":["okta.governance.labels.read"]},{"$$mdtype":"Tag","name":"td","attributes":{},"children":["Allows the user to read information about labels in your Okta org"]}]},{"$$mdtype":"Tag","name":"tr","attributes":{},"children":[{"$$mdtype":"Tag","name":"td","attributes":{},"children":["okta.governance.securityAccessReviews.admin.manage"]},{"$$mdtype":"Tag","name":"td","attributes":{},"children":["Allows the admin app to create and manage security access reviews"]}]},{"$$mdtype":"Tag","name":"tr","attributes":{},"children":[{"$$mdtype":"Tag","name":"td","attributes":{},"children":["okta.governance.securityAccessReviews.admin.read"]},{"$$mdtype":"Tag","name":"td","attributes":{},"children":["Allows the admin app to read information about security access reviews"]}]},{"$$mdtype":"Tag","name":"tr","attributes":{},"children":[{"$$mdtype":"Tag","name":"td","attributes":{},"children":["okta.governance.securityAccessReviews.endUser.manage"]},{"$$mdtype":"Tag","name":"td","attributes":{},"children":["Allows the end-user app to create and manage security access reviews"]}]},{"$$mdtype":"Tag","name":"tr","attributes":{},"children":[{"$$mdtype":"Tag","name":"td","attributes":{},"children":["okta.governance.securityAccessReviews.endUser.read"]},{"$$mdtype":"Tag","name":"td","attributes":{},"children":["Allows the end-user app to read information about security access reviews"]}]},{"$$mdtype":"Tag","name":"tr","attributes":{},"children":[{"$$mdtype":"Tag","name":"td","attributes":{},"children":["okta.governance.principalSettings.manage"]},{"$$mdtype":"Tag","name":"td","attributes":{},"children":["Allows the app to create and manage governance settings for any user in your Okta org"]}]},{"$$mdtype":"Tag","name":"tr","attributes":{},"children":[{"$$mdtype":"Tag","name":"td","attributes":{},"children":["okta.governance.principalSettings.read"]},{"$$mdtype":"Tag","name":"td","attributes":{},"children":["Allows the app to read information about governance settings for any user in your Okta org"]}]},{"$$mdtype":"Tag","name":"tr","attributes":{},"children":[{"$$mdtype":"Tag","name":"td","attributes":{},"children":["okta.governance.settings.manage"]},{"$$mdtype":"Tag","name":"td","attributes":{},"children":["Allows the app to create and manage governance settings for your Okta org"]}]},{"$$mdtype":"Tag","name":"tr","attributes":{},"children":[{"$$mdtype":"Tag","name":"td","attributes":{},"children":["okta.governance.settings.read"]},{"$$mdtype":"Tag","name":"td","attributes":{},"children":["Allows the app to read information about governance settings for your Okta org"]}]},{"$$mdtype":"Tag","name":"tr","attributes":{},"children":[{"$$mdtype":"Tag","name":"td","attributes":{},"children":["okta.governance.delegates.read"]},{"$$mdtype":"Tag","name":"td","attributes":{},"children":["Allows the app to read information about delegates in your Okta org"]}]},{"$$mdtype":"Tag","name":"tr","attributes":{},"children":[{"$$mdtype":"Tag","name":"td","attributes":{},"children":["okta.governance.reviewer.read"]},{"$$mdtype":"Tag","name":"td","attributes":{},"children":["Allows the end user to read information about access certification reviews assigned to them"]}]},{"$$mdtype":"Tag","name":"tr","attributes":{},"children":[{"$$mdtype":"Tag","name":"td","attributes":{},"children":["okta.governance.reviewer.manage"]},{"$$mdtype":"Tag","name":"td","attributes":{},"children":["Allows the end user to manage access certification reviews assigned to them"]}]},{"$$mdtype":"Tag","name":"tr","attributes":{},"children":[{"$$mdtype":"Tag","name":"td","attributes":{},"children":["okta.accessRequests.tasks.manage"]},{"$$mdtype":"Tag","name":"td","attributes":{},"children":["Allows the user to manage tasks for access requests in your Okta org"]}]},{"$$mdtype":"Tag","name":"tr","attributes":{},"children":[{"$$mdtype":"Tag","name":"td","attributes":{},"children":["okta.accessRequests.tasks.read"]},{"$$mdtype":"Tag","name":"td","attributes":{},"children":["Allows the user to read information about tasks for access requests in your Okta org"]}]}]}]}]}]},"headings":[{"value":"OAuth 2.0 Scopes","id":"oauth-20-scopes","depth":1},{"value":"Okta Governance API","id":"okta-governance-api","depth":2}],"frontmatter":{"title":"OAuth 2.0 Scopes","meta":[{"name":"description","content":"List of all Okta OAuth 2.0 scopes used for governance APIs."}],"seo":{"title":"OAuth 2.0 Scopes"}},"lastModified":"2026-05-15T17:33:01.000Z","pagePropGetterError":{"message":"","name":""}},"slug":"/iga/oauth2","userData":{"isAuthenticated":false,"teams":["anonymous"]},"isPublic":true}