DataStax · OAuth Scopes

DataStax OAuth Scopes

OAuth 2.0 derived

DataStax publishes 15 OAuth 2.0 scopes. Scopes are the fine-grained permissions an application requests at authorization time to act against the DataStax API on a user’s behalf.

This index is generated from the provider’s OpenAPI security definitions (and, where available, its documented scope reference) and refreshes on every APIs.io network build. Browse every provider’s scopes at scopes.apis.io.

CompanyEnterpriseDatabaseVector DatabaseCassandraArtificial IntelligenceRAGServerlessStreamingDeveloper Tools

Scopes: 15 Flows: Method: derived

Scopes (15)

Scope	Description	Flows
org-admin	Full administrative access to the organization.
org-db-create	Create databases in the organization.
org-db-terminate	Terminate databases in the organization.
org-db-view	View databases and their details.
org-db-expand	Resize / expand databases (add capacity or regions).
org-db-suspend	Suspend / park databases.
org-db-addpeering	Add VPC peering / private-link connections.
org-db-readpeering	Read VPC peering / private-link configuration.
db-keyspace-create	Create keyspaces within a database.
db-cql	Execute CQL against a database.
accesslist-write	Create and modify database access lists (IP allowlists).
accesslist-read	Read database access lists.
db-manage-privateendpoint	Manage private endpoints for a database.
db-manage-telemetry	Configure telemetry / metrics export for a database.
db-manage-backupconfiguration	Manage backup configuration for a database.

📄 Provider scope reference: https://docs.datastax.com/en/astra-db-serverless/administration/manage-application-tokens.html

Source

OAuth Scopes

generated: '2026-07-18'
method: derived
source: openapi/datastax-devops-openapi.json
docs: https://docs.datastax.com/en/astra-db-serverless/administration/manage-application-tokens.html
note: Astra application tokens carry permission scopes (not OAuth2). These scope strings are declared
  on the BearerAuth security requirement in the DevOps API OpenAPI. Astra also supports fine-grained custom
  roles; this list captures the built-in permission scopes present in the spec.
schemes:
- name: BearerAuth
  type: http-bearer
  source: openapi/datastax-devops-openapi.json
scopes:
- scope: org-admin
  description: Full administrative access to the organization.
  schemes:
  - BearerAuth
  sources:
  - openapi/datastax-devops-openapi.json
- scope: org-db-create
  description: Create databases in the organization.
  schemes:
  - BearerAuth
  sources:
  - openapi/datastax-devops-openapi.json
- scope: org-db-terminate
  description: Terminate databases in the organization.
  schemes:
  - BearerAuth
  sources:
  - openapi/datastax-devops-openapi.json
- scope: org-db-view
  description: View databases and their details.
  schemes:
  - BearerAuth
  sources:
  - openapi/datastax-devops-openapi.json
- scope: org-db-expand
  description: Resize / expand databases (add capacity or regions).
  schemes:
  - BearerAuth
  sources:
  - openapi/datastax-devops-openapi.json
- scope: org-db-suspend
  description: Suspend / park databases.
  schemes:
  - BearerAuth
  sources:
  - openapi/datastax-devops-openapi.json
- scope: org-db-addpeering
  description: Add VPC peering / private-link connections.
  schemes:
  - BearerAuth
  sources:
  - openapi/datastax-devops-openapi.json
- scope: org-db-readpeering
  description: Read VPC peering / private-link configuration.
  schemes:
  - BearerAuth
  sources:
  - openapi/datastax-devops-openapi.json
- scope: db-keyspace-create
  description: Create keyspaces within a database.
  schemes:
  - BearerAuth
  sources:
  - openapi/datastax-devops-openapi.json
- scope: db-cql
  description: Execute CQL against a database.
  schemes:
  - BearerAuth
  sources:
  - openapi/datastax-devops-openapi.json
- scope: accesslist-write
  description: Create and modify database access lists (IP allowlists).
  schemes:
  - BearerAuth
  sources:
  - openapi/datastax-devops-openapi.json
- scope: accesslist-read
  description: Read database access lists.
  schemes:
  - BearerAuth
  sources:
  - openapi/datastax-devops-openapi.json
- scope: db-manage-privateendpoint
  description: Manage private endpoints for a database.
  schemes:
  - BearerAuth
  sources:
  - openapi/datastax-devops-openapi.json
- scope: db-manage-telemetry
  description: Configure telemetry / metrics export for a database.
  schemes:
  - BearerAuth
  sources:
  - openapi/datastax-devops-openapi.json
- scope: db-manage-backupconfiguration
  description: Manage backup configuration for a database.
  schemes:
  - BearerAuth
  sources:
  - openapi/datastax-devops-openapi.json