Orange Business · OAuth Scopes

Orange Business OAuth Scopes

OAuth 2.0 searched

Orange Business publishes 23 OAuth 2.0 scopes via the authorizationCode flow. Scopes are the fine-grained permissions an application requests at authorization time to act against the Orange Business API on a user’s behalf.

Tokens are issued from https://liveobjects.orange-business.com/api/v1/oauth2/token.

This index is generated from the provider’s OpenAPI security definitions (and, where available, its documented scope reference) and refreshes on every APIs.io network build. Browse every provider’s scopes at scopes.apis.io.

5GArtificial IntelligenceB2BCAMARACloudCommunicationsCybersecurityDeveloper PlatformDigital WorkplaceEnterpriseFranceIoTIdentityMobile MoneyNetwork APIsOpen GatewayOrangePaymentsSD-WANSMSSASETelcoVoice

Scopes: 23 Flows: authorizationCode Method: searched

OAuth endpoints

Authorization URL
https://liveobjects.orange-business.com/api/v1/oauth2/authorize

Token URL
https://liveobjects.orange-business.com/api/v1/oauth2/token

Flows
authorizationCode

Scopes (23)

Scope	Description	Flows
API_KEY_R	Read parameters and status of an API key.	authorizationCode
API_KEY_W	Create, modify, disable an API key.	authorizationCode
BOOTSTRAP_R	Read parameters and status of the LwM2M Bootstrap configurations and entries.	authorizationCode
BOOTSTRAP_W	Create ans modify LwM2M Bootstrap configurations and entries.	authorizationCode
BUS_CONFIG_R	Read config parameters of a FIFO queue.	authorizationCode
BUS_CONFIG_W	Create, modify a FIFO queue.	authorizationCode
BUS_R	Read data on the Live Objects bus. Minimum permission for the API key of an application collecting data on Live Objects in MQTT(s).	authorizationCode
BUS_W	Publish data on the Live Objects bus.	authorizationCode
CAMPAIGN_R	Read parameters and status of a massive deployment campaign on your Device Fleet.	authorizationCode
CAMPAIGN_W	Create, modify a campaign on your Device Fleet.	authorizationCode
CONNECTOR_ACCESS	Role to set on a external connector API key to allow only MQTT external connector mode	authorizationCode
DATA_PROCESSING_R	Read parameters and status of an event processing rule or a Data decoder.	authorizationCode
DATA_PROCESSING_W	Create, modify, disable an event processing rule or a Data decoder.	authorizationCode
DATA_R	Read the data collected by the Store Service or search into this data using the Search Service.	authorizationCode
DATA_W	Insert a data record to the Store Service. Minimum permission required for the API key of a device pushing data to Live Objects in HTTPS.	authorizationCode
DEVICE_ACCESS	Role to set on a Device API key to allow only MQTT Device mode	authorizationCode
DEVICE_R	Read parameters and status of a Device management.	authorizationCode
DEVICE_W	Create, modify, disable a Device management, send command, modify config, update resource of a Device.	authorizationCode
LOGS_R	Read the logs collected by the Audit Log service. This right allows users to use the Audit Log service as debugging tool.	authorizationCode
SETTINGS_R	Read the tenant account custom settings.	authorizationCode
SETTINGS_W	Create, modify tenant account custom settings.	authorizationCode
USER_R	Read parameters and status of a user.	authorizationCode
USER_W	Create, modify, disable a user.	authorizationCode

📄 Provider scope reference: https://liveobjects.orange-business.com/doc/html/lo_manual_v2.htmlhttps://docs.developer.orange.com/network-apis/practical-guides/api-authentication/backend-flow

Source

OAuth Scopes

generated: '2026-08-26'
method: searched
source: openapi/orange-business-live-objects-openapi.json
schemes:
- name: OAuth2.0
  source: openapi/orange-business-live-objects-openapi.json
  flows:
  - flow: authorizationCode
    authorizationUrl: https://liveobjects.orange-business.com/api/v1/oauth2/authorize
    tokenUrl: https://liveobjects.orange-business.com/api/v1/oauth2/token
scopes:
- scope: API_KEY_R
  description: Read parameters and status of an API key.
  flows:
  - authorizationCode
  sources:
  - openapi/orange-business-live-objects-openapi.json
- scope: API_KEY_W
  description: Create, modify, disable an API key.
  flows:
  - authorizationCode
  sources:
  - openapi/orange-business-live-objects-openapi.json
- scope: BOOTSTRAP_R
  description: Read parameters and status of the LwM2M Bootstrap configurations and entries.
  flows:
  - authorizationCode
  sources:
  - openapi/orange-business-live-objects-openapi.json
- scope: BOOTSTRAP_W
  description: Create ans modify LwM2M Bootstrap configurations and entries.
  flows:
  - authorizationCode
  sources:
  - openapi/orange-business-live-objects-openapi.json
- scope: BUS_CONFIG_R
  description: Read config parameters of a FIFO queue.
  flows:
  - authorizationCode
  sources:
  - openapi/orange-business-live-objects-openapi.json
- scope: BUS_CONFIG_W
  description: Create, modify a FIFO queue.
  flows:
  - authorizationCode
  sources:
  - openapi/orange-business-live-objects-openapi.json
- scope: BUS_R
  description: Read data on the Live Objects bus. Minimum permission for the API key of an application collecting
    data on Live Objects in MQTT(s).
  flows:
  - authorizationCode
  sources:
  - openapi/orange-business-live-objects-openapi.json
- scope: BUS_W
  description: Publish data on the Live Objects bus.
  flows:
  - authorizationCode
  sources:
  - openapi/orange-business-live-objects-openapi.json
- scope: CAMPAIGN_R
  description: Read parameters and status of a massive deployment campaign on your Device Fleet.
  flows:
  - authorizationCode
  sources:
  - openapi/orange-business-live-objects-openapi.json
- scope: CAMPAIGN_W
  description: Create, modify a campaign on your Device Fleet.
  flows:
  - authorizationCode
  sources:
  - openapi/orange-business-live-objects-openapi.json
- scope: CONNECTOR_ACCESS
  description: Role to set on a external connector API key to allow only MQTT external connector mode
  flows:
  - authorizationCode
  sources:
  - openapi/orange-business-live-objects-openapi.json
- scope: DATA_PROCESSING_R
  description: Read parameters and status of an event processing rule or a Data decoder.
  flows:
  - authorizationCode
  sources:
  - openapi/orange-business-live-objects-openapi.json
- scope: DATA_PROCESSING_W
  description: Create, modify, disable an event processing rule or a Data decoder.
  flows:
  - authorizationCode
  sources:
  - openapi/orange-business-live-objects-openapi.json
- scope: DATA_R
  description: Read the data collected by the Store Service or search into this data using the Search Service.
  flows:
  - authorizationCode
  sources:
  - openapi/orange-business-live-objects-openapi.json
- scope: DATA_W
  description: Insert a data record to the Store Service. Minimum permission required for the API key of a
    device pushing data to Live Objects in HTTPS.
  flows:
  - authorizationCode
  sources:
  - openapi/orange-business-live-objects-openapi.json
- scope: DEVICE_ACCESS
  description: Role to set on a Device API key to allow only MQTT Device mode
  flows:
  - authorizationCode
  sources:
  - openapi/orange-business-live-objects-openapi.json
- scope: DEVICE_R
  description: Read parameters and status of a Device management.
  flows:
  - authorizationCode
  sources:
  - openapi/orange-business-live-objects-openapi.json
- scope: DEVICE_W
  description: Create, modify, disable a Device management, send command, modify config, update resource of
    a Device.
  flows:
  - authorizationCode
  sources:
  - openapi/orange-business-live-objects-openapi.json
- scope: LOGS_R
  description: Read the logs collected by the Audit Log service. This right allows users to use the Audit Log
    service as debugging tool.
  flows:
  - authorizationCode
  sources:
  - openapi/orange-business-live-objects-openapi.json
- scope: SETTINGS_R
  description: Read the tenant account custom settings.
  flows:
  - authorizationCode
  sources:
  - openapi/orange-business-live-objects-openapi.json
- scope: SETTINGS_W
  description: Create, modify tenant account custom settings.
  flows:
  - authorizationCode
  sources:
  - openapi/orange-business-live-objects-openapi.json
- scope: USER_R
  description: Read parameters and status of a user.
  flows:
  - authorizationCode
  sources:
  - openapi/orange-business-live-objects-openapi.json
- scope: USER_W
  description: Create, modify, disable a user.
  flows:
  - authorizationCode
  sources:
  - openapi/orange-business-live-objects-openapi.json
docs:
- https://liveobjects.orange-business.com/doc/html/lo_manual_v2.html
- https://docs.developer.orange.com/network-apis/practical-guides/api-authentication/backend-flow
note: 'The 23 scopes below are Live Objects API-key roles, declared verbatim in the Live Objects OpenAPI OAuth2.0
  authorizationCode flow and enforced per operation ("Restricted to API keys with at least one of the following
  roles: ..."). They pair R/W by domain — DATA, DEVICE, USER, API_KEY, BUS, BUS_CONFIG, CAMPAIGN, DATA_PROCESSING,
  BOOTSTRAP, SETTINGS — plus two connection-mode roles (DEVICE_ACCESS, CONNECTOR_ACCESS) and one read-only
  audit role (LOGS_R).


  The CAMARA Network APIs on api.orange.com do NOT use named scopes. Their authorization is purpose-bound instead:
  the scope string is `openid dpv:<dpvValue> <technicalParameter>`, carrying a W3C Data Privacy Vocabulary
  purpose value rather than an API permission. There is no scope list to enumerate for that estate — the vocabulary
  is DPV''s, not Orange''s.'
camara_scope_model:
  style: purpose-bound (W3C DPV)
  form: openid dpv:<dpvValue> <technicalParameter>
  source: https://docs.developer.orange.com/network-apis/practical-guides/api-authentication/backend-flow
  named_scopes: 0

Work with this as data

Every scope set here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for oauth scopes

4 MCP tools reach this

find_scopesBrowse and filter every scope set in the catalog.
apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
resolveTurn a domain, URL or GitHub org into the provider it belongs to.
find_cohortsEvery scored population of providers in the catalog.

All 92 tools →

Call it yourself

curl for this page

This scope set

curl "https://apis.io/api/v1/scopes/orange-business-scopes"

All oauth scopes

curl "https://apis.io/api/v1/scopes?limit=25"

Discovery needs no key. Ratings and market analysis are Pro.

Get an API key

Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.

GitHub Google LinkedIn

A second provider on the same verified email joins the account you already have.