Datum · OAuth Scopes

Datum OAuth Scopes

OAuth 2.0 searched

Datum publishes 6 OAuth 2.0 scopes. Scopes are the fine-grained permissions an application requests at authorization time to act against the Datum API on a user’s behalf.

This index is generated from the provider’s OpenAPI security definitions (and, where available, its documented scope reference) and refreshes on every APIs.io network build. Browse every provider’s scopes at scopes.apis.io.

CompanyDataCloudNetworkingEdgeAIDNSInfrastructureCDNDeveloper Tools

Scopes: 6 Flows: Method: searched

Scopes (6)

Scope	Description	Flows
openid	OIDC authentication — issue an ID token.
profile	Access to the user's basic profile claims (name, preferred_username, locale).
email	Access to the user's email address and verification status.
phone	Access to the user's phone number and verification status.
address	Access to the user's address claim.
offline_access	Issue a refresh token for long-lived, offline access.

📄 Provider scope reference: https://www.datum.net/docs/datumctl/auth/logging-in.md

Source

OAuth Scopes

generated: '2026-07-18'
method: searched
source: https://www.datum.net/.well-known/openid-configuration
docs: https://www.datum.net/docs/datumctl/auth/logging-in.md
schemes:
- name: OAuth2
  source: well-known/datum-openid-configuration.json
  authorizationUrl: https://auth.datum.net/oauth/v2/authorize
  tokenUrl: https://auth.datum.net/oauth/v2/token
scopes:
- scope: openid
  description: OIDC authentication — issue an ID token.
- scope: profile
  description: Access to the user's basic profile claims (name, preferred_username, locale).
- scope: email
  description: Access to the user's email address and verification status.
- scope: phone
  description: Access to the user's phone number and verification status.
- scope: address
  description: Access to the user's address claim.
- scope: offline_access
  description: Issue a refresh token for long-lived, offline access.
note: >-
  These are the standard OIDC scopes advertised by the Datum identity provider
  (auth.datum.net). Resource-level authorization on the Datum Cloud control-plane
  API is enforced via RBAC on the bearer token rather than fine-grained OAuth
  scopes.