Proemion · OAuth Scopes

Proemion OAuth Scopes

OAuth 2.0 searched

Proemion publishes 12 OAuth 2.0 scopes via the clientCredentials flow. Scopes are the fine-grained permissions an application requests at authorization time to act against the Proemion API on a user’s behalf.

Tokens are issued from https://dataportal.proemion.com/auth/realms/af0b450b-63cb-4f6e-a994-bdab447c64ba/protocol/openid-connect/token.

This index is generated from the provider’s OpenAPI security definitions (and, where available, its documented scope reference) and refreshes on every APIs.io network build. Browse every provider’s scopes at scopes.apis.io.

CompanyTelematicsIoTOff-Highway EquipmentCAN BusFleet ManagementMachine DataOEMAEMPConstructionAgriculture

Scopes: 12 Flows: clientCredentials Method: searched

OAuth endpoints

Token URL
https://dataportal.proemion.com/auth/realms/af0b450b-63cb-4f6e-a994-bdab447c64ba/protocol/openid-connect/token

Flows
clientCredentials

Scopes (12)

Scope	Description	Flows
openid	OpenID Connect authentication.
profile	Basic profile claims.
email	Email claim.
roles	Realm/client role claims.
offline_access	Issue a refresh token for offline access.
service_account	Service-account (machine-to-machine) client-credentials access.
basic	Basic claim set.
address	Address claims.
phone	Phone claims.
microprofile-jwt	MicroProfile JWT claims (groups/roles).
web-origins	Allowed CORS web origins.
acr	Authentication Context Class Reference.

📄 Provider scope reference: https://docs.proemion.com/docs/dataportal/organization_structure/#api-client-management

Source

OAuth Scopes

generated: '2026-07-20'
method: searched
source: https://api.proemion.com/.well-known/openid-configuration
docs: https://docs.proemion.com/docs/dataportal/organization_structure/#api-client-management
note: >-
  OpenID Connect realm scopes advertised by the Proemion Keycloak authorization
  server (scopes_supported). These are the standard OIDC/service-account scopes;
  fine-grained DataPlatform permissions are governed by the API client's assigned
  role/organization in the DataPortal rather than by request scopes.
schemes:
- name: OAuth2
  flows:
  - flow: clientCredentials
    tokenUrl: https://dataportal.proemion.com/auth/realms/af0b450b-63cb-4f6e-a994-bdab447c64ba/protocol/openid-connect/token
scopes:
- scope: openid
  description: OpenID Connect authentication.
- scope: profile
  description: Basic profile claims.
- scope: email
  description: Email claim.
- scope: roles
  description: Realm/client role claims.
- scope: offline_access
  description: Issue a refresh token for offline access.
- scope: service_account
  description: Service-account (machine-to-machine) client-credentials access.
- scope: basic
  description: Basic claim set.
- scope: address
  description: Address claims.
- scope: phone
  description: Phone claims.
- scope: microprofile-jwt
  description: MicroProfile JWT claims (groups/roles).
- scope: web-origins
  description: Allowed CORS web origins.
- scope: acr
  description: Authentication Context Class Reference.