Buildingconnected OAuth Scopes

OAuth 2.0 searched

Buildingconnected publishes 16 OAuth 2.0 scopes. Scopes are the fine-grained permissions an application requests at authorization time to act against the Buildingconnected API on a user’s behalf.

This index is generated from the provider’s OpenAPI security definitions (and, where available, its documented scope reference) and refreshes on every APIs.io network build. Browse every provider’s scopes at scopes.apis.io.

CompanyConstructionPreconstructionBid ManagementConstruction TechnologyAutodeskAutodesk Platform ServicesSubcontractor Management

Scopes: 16 Flows: Method: searched

Scopes (16)

Scope	Description	Flows
data:read	Read access to Autodesk platform data (BuildingConnected opportunities, bid packages, users).
data:write	Write/update access to platform data.
data:create	Create new platform data resources.
data:search	Search platform data.
account:read	Read account/hub-level information.
account:write	Write account/hub-level information.
user:read	Read the authenticated user's profile.
user:write	Update the authenticated user's profile.
user-profile:read	Read the authenticated user's profile (legacy scope).
viewables:read	Read access to viewable/derivative data.
bucket:create	Create OSS storage buckets.
bucket:read	Read OSS storage buckets.
bucket:update	Update OSS storage buckets.
bucket:delete	Delete OSS storage buckets.
code:all	Design Automation code execution scope.
openid	OpenID Connect authentication scope.

📄 Provider scope reference: https://aps.autodesk.com/en/docs/oauth/v2/developers_guide/scopes/

Source

OAuth Scopes

generated: '2026-07-18'
method: searched
source: https://developer.api.autodesk.com/.well-known/oauth-authorization-server
docs: https://aps.autodesk.com/en/docs/oauth/v2/developers_guide/scopes/
note: >-
  These are the OAuth 2.0 scopes advertised by the shared Autodesk Platform Services (APS)
  authorization server (scopes_supported) that fronts the BuildingConnected API. The list is
  platform-wide; the BuildingConnected /v2 endpoints consume the data:* and account:* scopes.
  Captured verbatim from the live authorization-server metadata — not a per-operation mapping.
schemes:
- name: APS OAuth 2.0
  source: well-known/buildingconnected-oauth-authorization-server.json
  authorizationUrl: https://developer.api.autodesk.com/authentication/v2/authorize
  tokenUrl: https://developer.api.autodesk.com/authentication/v2/token
scopes:
- scope: data:read
  description: Read access to Autodesk platform data (BuildingConnected opportunities, bid packages, users).
- scope: data:write
  description: Write/update access to platform data.
- scope: data:create
  description: Create new platform data resources.
- scope: data:search
  description: Search platform data.
- scope: account:read
  description: Read account/hub-level information.
- scope: account:write
  description: Write account/hub-level information.
- scope: user:read
  description: Read the authenticated user's profile.
- scope: user:write
  description: Update the authenticated user's profile.
- scope: user-profile:read
  description: Read the authenticated user's profile (legacy scope).
- scope: viewables:read
  description: Read access to viewable/derivative data.
- scope: bucket:create
  description: Create OSS storage buckets.
- scope: bucket:read
  description: Read OSS storage buckets.
- scope: bucket:update
  description: Update OSS storage buckets.
- scope: bucket:delete
  description: Delete OSS storage buckets.
- scope: code:all
  description: Design Automation code execution scope.
- scope: openid
  description: OpenID Connect authentication scope.