Qlik Sense · OAuth Scopes

Qlik Sense OAuth Scopes

OAuth 2.0 searched

Qlik Sense publishes 225 OAuth 2.0 scopes. Scopes are the fine-grained permissions an application requests at authorization time to act against the Qlik Sense API on a user’s behalf.

Tokens are issued from https://{tenant}.{region}.qlikcloud.com/oauth/token.

This index is generated from the provider’s OpenAPI security definitions (and, where available, its documented scope reference) and refreshes on every APIs.io network build. Browse every provider’s scopes at scopes.apis.io.

AgentsAnalyticsArtificial IntelligenceBusiness IntelligenceCloudData IntegrationData VisualizationEmbedded AnalyticsEnterpriseMachine Learning

Scopes: 225 Flows: Method: searched

OAuth endpoints

Authorization URL
https://{tenant}.{region}.qlikcloud.com/oauth/authorize

Token URL
https://{tenant}.{region}.qlikcloud.com/oauth/token

Flows

Scopes (225)

Scope	Description	Flows
admin_classic	Full administrator access to your tenant
admin.ai-descriptions	Manage tenant settings for generating AI-based descriptions for any resource and validation rule suggestions for datasets. Access and manage any generation without space restrictions.
admin.aiplatform	Create a chat conversation with an LLM
admin.apps	Read and manage all apps in the tenant
admin.apps:export	Export all apps in the tenant
admin.apps:read	Read all apps in the tenant
admin.assistants	Read and manage all assistants
admin.auth-settings	View and update authentication settings for a tenant, including session timeout settings.
admin.automations	Read and manage all automations in the tenant
admin.automations:read	Read all automations in the tenant
admin.automations:strict	Manage all automations in the tenant.
admin.automl-models:approve	Approve or reject all ML models in the tenant
admin.automl:full	Manage all ML experiments and deployments within Administration
admin.collections.publicgoverned	Create and update public collections
admin.csp	Create, update, read, list, delete.
admin.dataproduct	Access and manage any data products without space restrictions.
admin.dataquality	Access and manage data quality settings without space restrictions.
admin.dataqualityrules	Access, manage, and change ownership of any validation rules without space restrictions.
admin.direct-access-gateways:delete_gateway	Delete Direct Access gateway from this tenant.
admin.direct-access-gateways:register_gateway	Register Direct Access gateway for this tenant.
admin.direct-access-gateways:remote_configuration	View and modify Direct Access gateway settings
admin.environments	Create, read, update, and delete environments. Allows linking environments to spaces.
admin.extensions	Create, read, update, delete, and download extensions.
admin.insightshome:edit	Curate content for better findability.
admin.ip-policies	View and manage IP policies in the tenant, including creating, updating, and deleting them.
admin.knowledgebases	Read and manage all knowledge bases
admin.lakehouse-cluster	Create, edit, and operate lakehouse clusters
admin.report-tasks	Manage report tasks and subscriptions, and read the associated templates and filters.
admin.semantictype	Access and manage any semantic type.
admin.spaces	Read and manage all spaces in the tenant
admin.spaces:read	Read all spaces in the tenant
admin.sprints	Access and manage all data stewardship sprints, without space restrictions.
admin.themes	Create, read, update, delete, and download themes.
admin.ui-config:edit	Configure tenant-wide user interface settings and available options, such as pinned links.
admin.users	Read and manage all users
admin.users:read	Full read access to all users
admin.webhooks	Manage webhooks in the Administration activity center.
user_default	Full access to your account and content
ai-descriptions	Generate AI-based validation rules for datasets and descriptions for any resource.
analysis-agent	Lets users use Qlik Answers to analyse data, create charts, get predictions, and gather insights from documents
api-keys	Create, view, update, and delete your own API keys.
app.share	Space owners and users with the 'Can manage' role can share applications with any group or user without adding them to the space.
apps	Read and manage your apps
apps:export	Export your apps
apps:read	Read your apps
apps:manage	Override automatic engine selection by assigning an engine size to applications.
apps.data:export	Download all app content or images and PDFs only, blocking data downloads.
apps.image:export	Download app content as images and PDFs only
apps.report:all	Generate all types of reports, including in-app, API, scheduled, on-demand, and automated. Also manage filters, recipients, and tasks. Author report templates in add-ins and embedded designers.
apps.report:export	Generate on-demand reports.
assistants	Read and manage assistants
assistants:read	Basic query access to assistants
automations	Read and manage your automations
automations:read	Read your automations
automations.private	Read and manage automations in your personal space
automations.shared	Read and manage your automations in shared spaces
automl-deployments	Allow users to view and update ML deployments and run all predictions, run API and connector predictions only, or block access to ML deployments and predictions.
automl-deployments:predict	Create predictions only
automl-experiments	Read and manage your ML experiments
automl-experiments:no_gen_ai_assist	Create and update ML experiments without any GenAI-assisted functions.
automl-models:approve	Approve or reject ML models in spaces to which you have edit access
classic_talend.audit_logs_view	Talend: View audit logs
classic_talend.connection_create	Talend: Create connections
classic_talend.connection_delete	Talend: Delete connections
classic_talend.connection_read	Talend: View connections
classic_talend.connection_share	Talend: Share connections
classic_talend.connection_update	Talend: Update connections
classic_talend.crawling_create	Talend: Create crawlers
classic_talend.crawling_delete	Talend: Delete crawlers
classic_talend.crawling_read	Talend: View crawlers
classic_talend.crawling_update	Talend: Update crawlers
classic_talend.custom_attribute_create	Talend: Add custom attributes
classic_talend.custom_attribute_delete	Talend: Delete custom attributes
classic_talend.custom_attribute_read	Talend: View custom attributes
classic_talend.custom_attribute_update	Talend: Edit custom attributes
classic_talend.dataset_advanced_search	Talend: Perform advanced dataset search
classic_talend.dataset_api_manage	Talend: Manage APIs
classic_talend.dataset_api_view	Talend: View APIs
classic_talend.dataset_attributes_manage	Talend: Manage custom attributes of a dataset
classic_talend.dataset_certify	Talend: Certify datasets
classic_talend.dataset_create	Talend: Create datasets
classic_talend.dataset_delete	Talend: Delete datasets
classic_talend.dataset_download	Talend: Download datasets
classic_talend.dataset_read	Talend: View datasets
classic_talend.dataset_sample_update	Talend: Refresh sample
classic_talend.dataset_schema_update	Talend: Set semantic type
classic_talend.dataset_share	Talend: Share datasets with others
classic_talend.dataset_tags_manage	Talend: Add or remove tags on datasets
classic_talend.dataset_update	Talend: Update datasets
classic_talend.execution_logs_delete	Talend: Delete execution logs
classic_talend.rule_create	Talend: Create data quality rules
classic_talend.rule_delete	Talend: Delete data quality rules
classic_talend.rule_edit	Talend: Edit data quality rules
classic_talend.rule_view	Talend: View data quality rules
classic_talend.studio_entitlement_studio_developer	Talend: Develop in Studio and Publish to Cloud Management Console
classic_talend.tapid_admin	Talend: Administrate API Designer
classic_talend.tapid_definition_manage	Talend: Create and Edit API contracts
classic_talend.tapid_definition_share	Talend: Share API contracts
classic_talend.tapid_portal_manage	Talend: Create and Edit an API Portal
classic_talend.tapit_project_manage	Talend: Create and Edit API scenarios
classic_talend.tapit_project_share	Talend: Share API scenarios
classic_talend.tdp_basic	Talend: Manage preparations and local datasets
classic_talend.tdp_dataset_certify	Talend: Certify datasets
classic_talend.tdp_dataset_perform_live	Talend: Manage live datasets
classic_talend.tdp_full_run_perform	Talend: Export all data from preparations
classic_talend.tdp_hybrid_management	Talend: Configure and activate Data Preparation Hybrid
classic_talend.tdp_prep_version_create	Talend: Create preparation versions
classic_talend.tdp_tcomp_use	Talend: Manage remote datasets
classic_talend.tdq_semantic_type_create	Talend: Create semantic types
classic_talend.tdq_semantic_type_delete	Talend: Delete semantic types
classic_talend.tdq_semantic_type_edit	Talend: Edit semantic types
classic_talend.tdq_semantic_type_list	Talend: List semantic types
classic_talend.tdq_semantic_type_publish	Talend: Publish semantic types
classic_talend.tdq_semantic_type_view	Talend: View semantic types
classic_talend.tds_assigned_task_assign	Talend: Delegate tasks
classic_talend.tds_assigned_task_data_update	Talend: Edit assigned tasks
classic_talend.tds_assigned_task_metadata_update	Talend: Edit assigned tasks metadata
classic_talend.tds_assigned_task_read	Talend: View assigned tasks
classic_talend.tds_campaign_create	Talend: Add campaigns
classic_talend.tds_campaign_delete	Talend: Delete campaigns
classic_talend.tds_campaign_list	Talend: List campaigns
classic_talend.tds_campaign_read	Talend: View campaigns
classic_talend.tds_campaign_update	Talend: Edit campaigns
classic_talend.tds_hybrid_management	Talend: Configure and activate Data Stewardship Hybrid
classic_talend.tds_schema_create	Talend: Add data models
classic_talend.tds_schema_delete	Talend: Delete data models
classic_talend.tds_schema_list	Talend: List data models
classic_talend.tds_schema_read	Talend: View data models
classic_talend.tds_schema_update	Talend: Edit data models
classic_talend.tds_task_assign	Talend: Assign tasks
classic_talend.tds_task_create	Talend: Add tasks
classic_talend.tds_task_delete	Talend: Delete tasks
classic_talend.tds_task_history_delete	Talend: Delete task history
classic_talend.tds_task_history_read	Talend: View task history
classic_talend.tds_task_metadata_update	Talend: Edit tasks metadata
classic_talend.tds_task_read	Talend: View tasks
classic_talend.tds_task_read_by_external_id	Talend: View tasks using external ID
classic_talend.tds_task_update	Talend: Edit tasks
classic_talend.tds_unassigned_task_assign	Talend: Self-assign unassigned tasks
classic_talend.tds_unassigned_task_read	Talend: View unassigned tasks
classic_talend.tds_users_read	Talend: View users
classic_talend.tmc_cloud_configuration_management	Talend: Manage cloud configurations
classic_talend.tmc_cluster_management	Talend: Manage Remote Engines and Remote Engine clusters
classic_talend.tmc_configuration_nexus_userlibs	Talend: Set up user libraries in the artifact repository
classic_talend.tmc_connection_resource_edit	Talend: Edit connections and resources
classic_talend.tmc_engine_use	Talend: View and use Remote Engines to run tasks
classic_talend.tmc_environment_management	Talend: Manage environments
classic_talend.tmc_group_management	Talend: Manage groups
classic_talend.tmc_operator	Talend: Manage operations
classic_talend.tmc_pipeline_management	Talend: Manage promotions
classic_talend.tmc_project_management	Talend: Manage projects (including project authorizations)
classic_talend.tmc_promotion_execution	Talend: Execute promotions
classic_talend.tmc_role_management	Talend: Manage roles
classic_talend.tmc_run_profile_management	Talend: Manage run profiles
classic_talend.tmc_service_account_management	Talend: Manage service accounts
classic_talend.tmc_sso_management	Talend: Configure single sign-on
classic_talend.tmc_static_ip_management	Talend: Configure static IP addresses for Cloud Engines
classic_talend.tmc_subscription_management	Talend: Access subscription information
classic_talend.tmc_user_management	Talend: Manage users
data-connections	Read and manage your data connections
data-connections:read	Read your data connections
data-governance-agents	Lets users use Qlik Answers to interact with and manage data governance functionality.
dataproduct	Create and manage data products.
dataproduct:consume	Browse and consume data products in the data marketplace.
dataquality	Compute and read data qualities.
dataquality:read	Read data quality.
dataqualityrules	Create, update, or apply validation rules to datasets.
dataqualityrules:assign	Read and apply validation rules to datasets.
dataset	Create, read, update, list, and delete datasets.
direct-access-gateways:consume_data	Load data via Direct Access gateway connectors
discovery-agent	Create triggers for anomaly detection, serving user feeds with insights.
discovery-agent:read	Allow users to consume and act on insights generated by the Discovery Agent in the activity center feed page.
environments:read	Read access to environments where the user is a space member.
genericlink:all	Create, update, and use links within spaces.
geo-operations	Execute any geographic operation.
geo-operations.limited	Allows all operations except geocoding
glossary:all	Full access to glossaries and terms, including approving terms
glossary:manage	Full access to glossaries and terms, except for approving terms
glossary:update	Read access to glossary metadata and access to glossary terms
governance-definition:read	Assign classifications to dataset fields and regulations to datasets
help-agent	Lets users use Qlik Answers to find relevant product documentation.
identity.email:read	Read your email address
identity.name:read	Read your full name
identity.picture:read	Read your profile picture
identity.subject:read	Read your user subject identifier
insight-advisor:experience	Lets users use Insight Advisor to analyse data and create charts.
knowledgebases	Read and manage knowledge bases
knowledgebases:read	Read access to knowledge bases
knowledgebases:index	Index content in knowledge bases
knowledgebases:search	Search content in knowledge bases
lakehouse-cluster-moderator	Edit settings and operate lakehouse clusters
lakehouse-cluster-viewer	View lakehouse clusters
lakehouse-cluster-operator	Stop, start, scale, and roll lakehouse clusters
learning-center:all	Learn more about Qlik features and capabilities.
lineage:create	Create lineage.
lineage:read	View lineage between assets
mcp:execute	Lets users use the Qlik MCP server
mobile:all	Allow use of the native mobile app (does not influence browser-based mobile activity).
mobile:mamintune	Enforce use of Intune for authentication and policy deployment in the Qlik Analytics mobile app.
network-integration-viewer	View network integration
notes	Create and manage notes based on roles within the space.
offline_access	Access resources while you are offline
pipelines-projects	Create, update, or view pipeline projects based on space access
pipelines-projects:read	Read and list pipeline projects based on space access
question:create	User who can access Insight Advisor from collaboration platforms.
semantictype	Create, update, or assign semantic types to datasets.
semantictype:read	Read and assign semantic types.
space-requests:create	Allows users to request access to content. When set to 'Not allowed,' you can define a custom message in Administration > Settings. The message appears when users try to open content they don't have permission to view and can direct them to the right team or process for requesting access.
spaces.data	Read and manage your data spaces
spaces.data:read	Read your data spaces
spaces.managed	Read and manage your managed spaces
spaces.managed:read	Read your managed spaces
spaces.shared	Read and manage your shared spaces
spaces.shared:create	Create shared spaces for collaboration.
spaces.shared:read	Read your shared spaces
sprints:all	Create, manage or contribute to sprints.
sprints:contribute	Participate in data stewardship sprints as a sprint owner or data steward. Roles are assigned in the sprint settings.
thread-audits	Lets users review agent and chat interactions
trustscore	Configure Qlik Trust Score™ axes and weights.
users	Basic read access to users and management of your user preferences
users:read	Basic read access to users
webhooks	Create and update webhooks using the webhooks API and automations UI.
write-table:external_read	Description not available
write-table:full	Full access, creation and configuration of write table charts
write-table:access	Read and write changes in write table charts

📄 Provider scope reference: https://qlik.dev/manage/access-control/scopes/

Source

OAuth Scopes

generated: '2026-08-29'
method: searched
source: https://qlik.dev/authenticate/oauth/scopes/ and https://qlik.dev/manage/access-control/scopes/
docs: https://qlik.dev/manage/access-control/scopes/
description: 'Qlik Cloud platform scopes, captured verbatim from Qlik''s own scope reference. Qlik uses ONE scope
  vocabulary for two purposes: limiting an OAuth token, and composing custom roles. The oauth flag below records
  which of the two a given scope is usable for. Scopes can only NARROW a token — they never grant a user access
  beyond the roles already assigned to them. These scopes are NOT derivable from the OpenAPI: none of the 78 published
  documents declares a securitySchemes block at all, so oauth2 flows and scopes are absent from the machine-readable
  contract and exist only in prose. That gap is recorded in conformance/qliksense-conformance.yml.'
flow:
  authorization_endpoint: https://{tenant}.{region}.qlikcloud.com/oauth/authorize
  token_endpoint: https://{tenant}.{region}.qlikcloud.com/oauth/token
  revocation_endpoint: https://{tenant}.{region}.qlikcloud.com/oauth/revoke
  metadata: https://{tenant}.{region}.qlikcloud.com/.well-known/oauth-authorization-server
  request_example: GET /oauth/authorize?scope=automations apps:read spaces:read identity.name:read
  delimiter: space
semantics:
  grouping: Administrator scopes (admin.*) grant tenant-wide access to resources the calling user may not hold named
    access to. User scopes grant access only to resources the user already has.
  hierarchy: Child scopes are narrower forms of their parent (apps -> apps:read, apps:export). The parent implies
    the children.
  allow_list: The authorization server grants every scope on the client's allow list even when the scope parameter
    is empty, but only those the user approved. Scopes must be named explicitly on the authorize request to be presented
    for approval.
  offline_access: offline_access is never granted implicitly and must be requested explicitly to obtain a refresh
    token.
  revocability: Users can remove previously approved scopes between authorizations, so clients must inspect the
    scopes actually present on a token.
counts:
  total: 225
  oauth_usable: 101
  custom_role_usable: 185
  user_default: 60
  administrator: 37
  user: 188
scopes:
- name: admin_classic
  description: Full administrator access to your tenant
  group: admin
  oauth: true
  custom_role: false
  user_default: false
  narrows: false
- name: admin.ai-descriptions
  description: Manage tenant settings for generating AI-based descriptions for any resource and validation rule
    suggestions for datasets. Access and manage any generation without space restrictions.
  group: admin
  oauth: true
  custom_role: true
  user_default: false
  narrows: false
- name: admin.aiplatform
  description: Create a chat conversation with an LLM
  group: admin
  oauth: true
  custom_role: false
  user_default: false
  narrows: false
- name: admin.apps
  description: Read and manage all apps in the tenant
  group: admin
  oauth: true
  custom_role: false
  user_default: false
  narrows: false
- name: admin.apps:export
  description: Export all apps in the tenant
  group: admin
  oauth: true
  custom_role: false
  user_default: false
  narrows: true
- name: admin.apps:read
  description: Read all apps in the tenant
  group: admin
  oauth: true
  custom_role: false
  user_default: false
  narrows: true
- name: admin.assistants
  description: Read and manage all assistants
  group: admin
  oauth: true
  custom_role: true
  user_default: false
  narrows: false
- name: admin.auth-settings
  description: View and update authentication settings for a tenant, including session timeout settings.
  group: admin
  oauth: true
  custom_role: false
  user_default: false
  narrows: false
- name: admin.automations
  description: Read and manage all automations in the tenant
  group: admin
  oauth: true
  custom_role: false
  user_default: false
  narrows: false
- name: admin.automations:read
  description: Read all automations in the tenant
  group: admin
  oauth: true
  custom_role: false
  user_default: false
  narrows: true
- name: admin.automations:strict
  description: Manage all automations in the tenant.
  group: admin
  oauth: false
  custom_role: true
  user_default: false
  narrows: false
- name: admin.automl-models:approve
  description: Approve or reject all ML models in the tenant
  group: admin
  oauth: false
  custom_role: true
  user_default: false
  narrows: false
- name: admin.automl:full
  description: Manage all ML experiments and deployments within Administration
  group: admin
  oauth: false
  custom_role: true
  user_default: false
  narrows: false
- name: admin.collections.publicgoverned
  description: Create and update public collections
  group: admin
  oauth: true
  custom_role: true
  user_default: false
  narrows: false
- name: admin.csp
  description: Create, update, read, list, delete.
  group: admin
  oauth: false
  custom_role: true
  user_default: false
  narrows: false
- name: admin.dataproduct
  description: Access and manage any data products without space restrictions.
  group: admin
  oauth: true
  custom_role: true
  user_default: false
  narrows: false
- name: admin.dataquality
  description: Access and manage data quality settings without space restrictions.
  group: admin
  oauth: true
  custom_role: true
  user_default: false
  narrows: false
- name: admin.dataqualityrules
  description: Access, manage, and change ownership of any validation rules without space restrictions.
  group: admin
  oauth: true
  custom_role: true
  user_default: false
  narrows: false
- name: admin.direct-access-gateways:delete_gateway
  description: Delete Direct Access gateway from this tenant.
  group: admin
  oauth: true
  custom_role: true
  user_default: false
  narrows: false
- name: admin.direct-access-gateways:register_gateway
  description: Register Direct Access gateway for this tenant.
  group: admin
  oauth: true
  custom_role: true
  user_default: false
  narrows: false
- name: admin.direct-access-gateways:remote_configuration
  description: View and modify Direct Access gateway settings
  group: admin
  oauth: true
  custom_role: false
  user_default: false
  narrows: false
- name: admin.environments
  description: Create, read, update, and delete environments. Allows linking environments to spaces.
  group: admin
  oauth: false
  custom_role: true
  user_default: false
  narrows: false
- name: admin.extensions
  description: Create, read, update, delete, and download extensions.
  group: admin
  oauth: true
  custom_role: true
  user_default: false
  narrows: false
- name: admin.insightshome:edit
  description: Curate content for better findability.
  group: admin
  oauth: false
  custom_role: true
  user_default: false
  narrows: false
- name: admin.ip-policies
  description: View and manage IP policies in the tenant, including creating, updating, and deleting them.
  group: admin
  oauth: true
  custom_role: false
  user_default: false
  narrows: false
- name: admin.knowledgebases
  description: Read and manage all knowledge bases
  group: admin
  oauth: true
  custom_role: true
  user_default: false
  narrows: false
- name: admin.lakehouse-cluster
  description: Create, edit, and operate lakehouse clusters
  group: admin
  oauth: false
  custom_role: true
  user_default: false
  narrows: false
- name: admin.report-tasks
  description: Manage report tasks and subscriptions, and read the associated templates and filters.
  group: admin
  oauth: true
  custom_role: false
  user_default: false
  narrows: false
- name: admin.semantictype
  description: Access and manage any semantic type.
  group: admin
  oauth: true
  custom_role: true
  user_default: false
  narrows: false
- name: admin.spaces
  description: Read and manage all spaces in the tenant
  group: admin
  oauth: true
  custom_role: false
  user_default: false
  narrows: false
- name: admin.spaces:read
  description: Read all spaces in the tenant
  group: admin
  oauth: true
  custom_role: false
  user_default: false
  narrows: true
- name: admin.sprints
  description: Access and manage all data stewardship sprints, without space restrictions.
  group: admin
  oauth: true
  custom_role: true
  user_default: false
  narrows: false
- name: admin.themes
  description: Create, read, update, delete, and download themes.
  group: admin
  oauth: true
  custom_role: true
  user_default: false
  narrows: false
- name: admin.ui-config:edit
  description: Configure tenant-wide user interface settings and available options, such as pinned links.
  group: admin
  oauth: false
  custom_role: true
  user_default: false
  narrows: false
- name: admin.users
  description: Read and manage all users
  group: admin
  oauth: true
  custom_role: false
  user_default: false
  narrows: false
- name: admin.users:read
  description: Full read access to all users
  group: admin
  oauth: true
  custom_role: false
  user_default: false
  narrows: true
- name: admin.webhooks
  description: Manage webhooks in the Administration activity center.
  group: admin
  oauth: true
  custom_role: false
  user_default: false
  narrows: false
- name: user_default
  description: Full access to your account and content
  group: user
  oauth: true
  custom_role: false
  user_default: false
  narrows: false
- name: ai-descriptions
  description: Generate AI-based validation rules for datasets and descriptions for any resource.
  group: user
  oauth: true
  custom_role: true
  user_default: true
  narrows: false
- name: analysis-agent
  description: Lets users use Qlik Answers to analyse data, create charts, get predictions, and gather insights
    from documents
  group: user
  oauth: true
  custom_role: true
  user_default: true
  narrows: false
- name: api-keys
  description: Create, view, update, and delete your own API keys.
  group: user
  oauth: false
  custom_role: true
  user_default: true
  narrows: false
- name: app.share
  description: Space owners and users with the 'Can manage' role can share applications with any group or user without
    adding them to the space.
  group: user
  oauth: true
  custom_role: true
  user_default: true
  narrows: false
- name: apps
  description: Read and manage your apps
  group: user
  oauth: true
  custom_role: false
  user_default: false
  narrows: false
- name: apps:export
  description: Export your apps
  group: user
  oauth: true
  custom_role: false
  user_default: false
  narrows: true
- name: apps:read
  description: Read your apps
  group: user
  oauth: true
  custom_role: false
  user_default: false
  narrows: true
- name: apps:manage
  description: Override automatic engine selection by assigning an engine size to applications.
  group: user
  oauth: true
  custom_role: true
  user_default: false
  narrows: false
- name: apps.data:export
  description: Download all app content or images and PDFs only, blocking data downloads.
  group: user
  oauth: true
  custom_role: true
  user_default: true
  narrows: false
- name: apps.image:export
  description: Download app content as images and PDFs only
  group: user
  oauth: true
  custom_role: true
  user_default: true
  narrows: true
- name: apps.report:all
  description: Generate all types of reports, including in-app, API, scheduled, on-demand, and automated. Also manage
    filters, recipients, and tasks. Author report templates in add-ins and embedded designers.
  group: user
  oauth: true
  custom_role: true
  user_default: true
  narrows: false
- name: apps.report:export
  description: Generate on-demand reports.
  group: user
  oauth: true
  custom_role: true
  user_default: true
  narrows: true
- name: assistants
  description: Read and manage assistants
  group: user
  oauth: true
  custom_role: true
  user_default: true
  narrows: false
- name: assistants:read
  description: Basic query access to assistants
  group: user
  oauth: true
  custom_role: true
  user_default: true
  narrows: true
- name: automations
  description: Read and manage your automations
  group: user
  oauth: true
  custom_role: false
  user_default: false
  narrows: false
- name: automations:read
  description: Read your automations
  group: user
  oauth: true
  custom_role: false
  user_default: false
  narrows: true
- name: automations.private
  description: Read and manage automations in your personal space
  group: user
  oauth: true
  custom_role: true
  user_default: true
  narrows: false
- name: automations.shared
  description: Read and manage your automations in shared spaces
  group: user
  oauth: true
  custom_role: true
  user_default: true
  narrows: false
- name: automl-deployments
  description: Allow users to view and update ML deployments and run all predictions, run API and connector predictions
    only, or block access to ML deployments and predictions.
  group: user
  oauth: true
  custom_role: true
  user_default: true
  narrows: false
- name: automl-deployments:predict
  description: Create predictions only
  group: user
  oauth: true
  custom_role: true
  user_default: true
  narrows: true
- name: automl-experiments
  description: Read and manage your ML experiments
  group: user
  oauth: true
  custom_role: true
  user_default: true
  narrows: false
- name: automl-experiments:no_gen_ai_assist
  description: Create and update ML experiments without any GenAI-assisted functions.
  group: user
  oauth: true
  custom_role: true
  user_default: true
  narrows: true
- name: automl-models:approve
  description: Approve or reject ML models in spaces to which you have edit access
  group: user
  oauth: false
  custom_role: true
  user_default: true
  narrows: false
- name: classic_talend.audit_logs_view
  description: 'Talend: View audit logs'
  group: user
  oauth: false
  custom_role: true
  user_default: false
  narrows: false
- name: classic_talend.connection_create
  description: 'Talend: Create connections'
  group: user
  oauth: false
  custom_role: true
  user_default: false
  narrows: false
- name: classic_talend.connection_delete
  description: 'Talend: Delete connections'
  group: user
  oauth: false
  custom_role: true
  user_default: false
  narrows: false
- name: classic_talend.connection_read
  description: 'Talend: View connections'
  group: user
  oauth: false
  custom_role: true
  user_default: false
  narrows: false
- name: classic_talend.connection_share
  description: 'Talend: Share connections'
  group: user
  oauth: false
  custom_role: true
  user_default: false
  narrows: false
- name: classic_talend.connection_update
  description: 'Talend: Update connections'
  group: user
  oauth: false
  custom_role: true
  user_default: false
  narrows: false
- name: classic_talend.crawling_create
  description: 'Talend: Create crawlers'
  group: user
  oauth: false
  custom_role: true
  user_default: false
  narrows: false
- name: classic_talend.crawling_delete
  description: 'Talend: Delete crawlers'
  group: user
  oauth: false
  custom_role: true
  user_default: false
  narrows: false
- name: classic_talend.crawling_read
  description: 'Talend: View crawlers'
  group: user
  oauth: false
  custom_role: true
  user_default: false
  narrows: false
- name: classic_talend.crawling_update
  description: 'Talend: Update crawlers'
  group: user
  oauth: false
  custom_role: true
  user_default: false
  narrows: false
- name: classic_talend.custom_attribute_create
  description: 'Talend: Add custom attributes'
  group: user
  oauth: false
  custom_role: true
  user_default: false
  narrows: false
- name: classic_talend.custom_attribute_delete
  description: 'Talend: Delete custom attributes'
  group: user
  oauth: false
  custom_role: true
  user_default: false
  narrows: false
- name: classic_talend.custom_attribute_read
  description: 'Talend: View custom attributes'
  group: user
  oauth: false
  custom_role: true
  user_default: false
  narrows: false
- name: classic_talend.custom_attribute_update
  description: 'Talend: Edit custom attributes'
  group: user
  oauth: false
  custom_role: true
  user_default: false
  narrows: false
- name: classic_talend.dataset_advanced_search
  description: 'Talend: Perform advanced dataset search'
  group: user
  oauth: false
  custom_role: true
  user_default: false
  narrows: false
- name: classic_talend.dataset_api_manage
  description: 'Talend: Manage APIs'
  group: user
  oauth: false
  custom_role: true
  user_default: false
  narrows: false
- name: classic_talend.dataset_api_view
  description: 'Talend: View APIs'
  group: user
  oauth: false
  custom_role: true
  user_default: false
  narrows: false
- name: classic_talend.dataset_attributes_manage
  description: 'Talend: Manage custom attributes of a dataset'
  group: user
  oauth: false
  custom_role: true
  user_default: false
  narrows: false
- name: classic_talend.dataset_certify
  description: 'Talend: Certify datasets'
  group: user
  oauth: false
  custom_role: true
  user_default: false
  narrows: false
- name: classic_talend.dataset_create
  description: 'Talend: Create datasets'
  group: user
  oauth: false
  custom_role: true
  user_default: false
  narrows: false
- name: classic_talend.dataset_delete
  description: 'Talend: Delete datasets'
  group: user
  oauth: false
  custom_role: true
  user_default: false
  narrows: false
- name: classic_talend.dataset_download
  description: 'Talend: Download datasets'
  group: user
  oauth: false
  custom_role: true
  user_default: false
  narrows: false
- name: classic_talend.dataset_read
  description: 'Talend: View datasets'
  group: user
  oauth: false
  custom_role: true
  user_default: false
  narrows: false
- name: classic_talend.dataset_sample_update
  description: 'Talend: Refresh sample'
  group: user
  oauth: false
  custom_role: true
  user_default: false
  narrows: false
- name: classic_talend.dataset_schema_update
  description: 'Talend: Set semantic type'
  group: user
  oauth: false
  custom_role: true
  user_default: false
  narrows: false
- name: classic_talend.dataset_share
  description: 'Talend: Share datasets with others'
  group: user
  oauth: false
  custom_role: true
  user_default: false
  narrows: false
- name: classic_talend.dataset_tags_manage
  description: 'Talend: Add or remove tags on datasets'
  group: user
  oauth: false
  custom_role: true
  user_default: false
  narrows: false
- name: classic_talend.dataset_update
  description: 'Talend: Update datasets'
  group: user
  oauth: false
  custom_role: true
  user_default: false
  narrows: false
- name: classic_talend.execution_logs_delete
  description: 'Talend: Delete execution logs'
  group: user
  oauth: false
  custom_role: true
  user_default: false
  narrows: false
- name: classic_talend.rule_create
  description: 'Talend: Create data quality rules'
  group: user
  oauth: false
  custom_role: true
  user_default: false
  narrows: false
- name: classic_talend.rule_delete
  description: 'Talend: Delete data quality rules'
  group: user
  oauth: false
  custom_role: true
  user_default: false
  narrows: false
- name: classic_talend.rule_edit
  description: 'Talend: Edit data quality rules'
  group: user
  oauth: false
  custom_role: true
  user_default: false
  narrows: false
- name: classic_talend.rule_view
  description: 'Talend: View data quality rules'
  group: user
  oauth: false
  custom_role: true
  user_default: false
  narrows: false
- name: classic_talend.studio_entitlement_studio_developer
  description: 'Talend: Develop in Studio and Publish to Cloud Management Console'
  group: user
  oauth: false
  custom_role: true
  user_default: false
  narrows: false
- name: classic_talend.tapid_admin
  description: 'Talend: Administrate API Designer'
  group: user
  oauth: false
  custom_role: true
  user_default: false
  narrows: false
- name: classic_talend.tapid_definition_manage
  description: 'Talend: Create and Edit API contracts'
  group: user
  oauth: false
  custom_role: true
  user_default: false
  narrows: false
- name: classic_talend.tapid_definition_share
  description: 'Talend: Share API contracts'
  group: user
  oauth: false
  custom_role: true
  user_default: false
  narrows: false
- name: classic_talend.tapid_portal_manage
  description: 'Talend: Create and Edit an API Portal'
  group: user
  oauth: false
  custom_role: true
  user_default: false
  narrows: false
- name: classic_talend.tapit_project_manage
  description: 'Talend: Create and Edit API scenarios'
  group: user
  oauth: false
  custom_role: true
  user_default: false
  narrows: false
- name: classic_talend.tapit_project_share
  description: 'Talend: Share API scenarios'
  group: user
  oauth: false
  custom_role: true
  user_default: false
  narrows: false
- name: classic_talend.tdp_basic
  description: 'Talend: Manage preparations and local datasets'
  group: user
  oauth: false
  custom_role: true
  user_default: false
  narrows: false
- name: classic_talend.tdp_dataset_certify
  description: 'Talend: Certify datasets'
  group: user
  oauth: false
  custom_role: true
  user_default: false
  narrows: false
- name: classic_talend.tdp_dataset_perform_live
  description: 'Talend: Manage live datasets'
  group: user
  oauth: false
  custom_role: true
  user_default: false
  narrows: false
- name: classic_talend.tdp_full_run_perform
  description: 'Talend: Export all data from preparations'
  group: user
  oauth: false
  custom_role: true
  user_default: false
  narrows: false
- name: classic_talend.tdp_hybrid_management
  description: 'Talend: Configure and activate Data Preparation Hybrid'
  group: user
  oauth: false
  custom_role: true
  user_default: false
  narrows: false
- name: classic_talend.tdp_prep_version_create
  description: 'Talend: Create preparation versions'
  group: user
  oauth: false
  custom_role: true
  user_default: false
  narrows: false
- name: classic_talend.tdp_tcomp_use
  description: 'Talend: Manage remote datasets'
  group: user
  oauth: false
  custom_role: true
  user_default: false
  narrows: false
- name: classic_talend.tdq_semantic_type_create
  description: 'Talend: Create semantic types'
  group: user
  oauth: false
  custom_role: true
  user_default: false
  narrows: false
- name: classic_talend.tdq_semantic_type_delete
  description: 'Talend: Delete semantic types'
  group: user
  oauth: false
  custom_role: true
  user_default: false
  narrows: false
- name: classic_talend.tdq_semantic_type_edit
  description: 'Talend: Edit semantic types'
  group: user
  oauth: false
  custom_role: true
  user_default: false
  narrows: false
- name: classic_talend.tdq_semantic_type_list
  description: 'Talend: List semantic types'
  group: user
  oauth: false
  custom_role: true
  user_default: false
  narrows: false
- name: classic_talend.tdq_semantic_type_publish
  description: 'Talend: Publish semantic types'
  group: user
  oauth: false
  custom_role: true
  user_default: false
  narrows: false
- name: classic_talend.tdq_semantic_type_view
  description: 'Talend: View semantic types'
  group: user
  oauth: false
  custom_role: true
  user_default: false
  narrows: false
- name: classic_talend.tds_assigned_task_assign
  description: 'Talend: Delegate tasks'
  group: user
  oauth: false
  custom_role: true
  user_default: false
  narrows: false
- name: classic_talend.tds_assigned_task_data_update
  description: 'Talend: Edit assigned tasks'
  group: user
  oauth: false
  custom_role: true
  user_default: false
  narrows: false
- name: classic_talend.tds_assigned_task_metadata_update
  description: 'Talend: Edit assigned tasks metadata'
  group: user
  oauth: false
  custom_role: true
  user_default: false
  narrows: false
- name: classic_talend.tds_assigned_task_read
  description: 'Talend: View assigned tasks'
  group: user
  oauth: false
  custom_role: true
  user_default: false
  narrows: false
- name: classic_talend.tds_campaign_create
  description: 'Talend: Add campaigns'
  group: user
  oauth: false
  custom_role: true
  user_default: false
  narrows: false
- name: classic_talend.tds_campaign_delete
  description: 'Talend: Delete campaigns'
  group: user
  oauth: false
  custom_role: true
  user_default: false
  narrows: false
- name: classic_talend.tds_campaign_list
  description: 'Talend: List campaigns'
  group: user
  oauth: false
  custom_role: true
  user_default: false
  narrows: false
- name: classic_talend.tds_campaign_read
  description: 'Talend: View campaigns'
  group: user
  oauth: false
  custom_role: true
  user_default: false
  narrows: false
- name: classic_talend.tds_campaign_update
  description: 'Talend: Edit campaigns'
  group: user
  oauth: false
  custom_role: true
  user_default: false
  narrows: false
- name: classic_talend.tds_hybrid_management
  description: 'Talend: Configure and activate Data Stewardship Hybrid'
  group: user
  oauth: false
  custom_role: true
  user_default: false
  narrows: false
- name: classic_talend.tds_schema_create
  description: 'Talend: Add data models'
  group: user
  oauth: false
  custom_role: true
  user_default: false
  narrows: false
- name: classic_talend.tds_schema_delete
  description: 'Talend: Delete data models'
  group: user
  oauth: false
  custom_role: true
  user_default: false
  narrows: false
- name: classic_talend.tds_schema_list
  description: 'Talend: List data models'
  group: user
  oauth: false
  custom_role: true
  user_default: false
  narrows: false
- name: classic_talend.tds_schema_read
  description: 'Talend: View data models'
  group: user
  oauth: false
  custom_role: true
  user_default: false
  narrows: false
- name: classic_talend.tds_schema_update
  description: 'Talend: Edit data models'
  group: user
  oauth: false
  custom_role: true
  user_default: false
  narrows: false
- name: classic_talend.tds_task_assign
  description: 'Talend: Assign tasks'
  group: user
  oauth: false
  custom_role: true
  user_default: false
  narrows: false
- name: classic_talend.tds_task_create
  description: 'Talend: Add tasks'
  group: user
  oauth: false
  custom_role: true
  user_default: false
  narrows: false
- name: classic_talend.tds_task_delete
  description: 'Talend: Delete tasks'
  group: user
  oauth: false
  custom_role: true
  user_default: false
  narrows: false
- name: classic_talend.tds_task_history_delete
  description: 'Talend: Delete task history'
  group: user
  oauth: false
  custom_role: true
  user_default: false
  narrows: false
- name: classic_talend.tds_task_history_read
  description: 'Talend: View task history'
  group: user
  oauth: false
  custom_role: true
  user_default: false
  narrows: false
- name: classic_talend.tds_task_metadata_update
  description: 'Talend: Edit tasks metadata'
  group: user
  oauth: false
  custom_role: true
  user_default: false
  narrows: false
- name: classic_talend.tds_task_read
  description: 'Talend: View tasks'
  group: user
  oauth: false
  custom_role: true
  user_default: false
  narrows: false
- name: classic_talend.tds_task_read_by_external_id
  description: 'Talend: View tasks using external ID'
  group: user
  oauth: false
  custom_role: true
  user_default: false
  narrows: false
- name: classic_talend.tds_task_update
  description: 'Talend: Edit tasks'
  group: user
  oauth: false
  custom_role: true
  user_default: false
  narrows: false
- name: classic_talend.tds_unassigned_task_assign
  description: 'Talend: Self-assign unassigned tasks'
  group: user
  oauth: false
  custom_role: true
  user_default: false
  narrows: false
- name: classic_talend.tds_unassigned_task_read
  description: 'Talend: View unassigned tasks'
  group: user
  oauth: false
  custom_role: true
  user_default: false
  narrows: false
- name: classic_talend.tds_users_read
  description: 'Talend: View users'
  group: user
  oauth: false
  custom_role: true
  user_default: false
  narrows: false
- name: classic_talend.tmc_cloud_configuration_management
  description: 'Talend: Manage cloud configurations'
  group: user
  oauth: false
  custom_role: true
  user_default: false
  narrows: false
- name: classic_talend.tmc_cluster_management
  description: 'Talend: Manage Remote Engines and Remote Engine clusters'
  group: user
  oauth: false
  custom_role: true
  user_default: false
  narrows: false
- name: classic_talend.tmc_configuration_nexus_userlibs
  description: 'Talend: Set up user libraries in the artifact repository'
  group: user
  oauth: false
  custom_role: true
  user_default: false
  narrows: false
- name: classic_talend.tmc_connection_resource_edit
  description: 'Talend: Edit connections and resources'
  group: user
  oauth: false
  custom_role: true
  user_default: false
  narrows: false
- name: classic_talend.tmc_engine_use
  description: 'Talend: View and use Remote Engines to run tasks'
  group: user
  oauth: false
  custom_role: true
  user_default: false
  narrows: false
- name: classic_talend.tmc_environment_management
  description: 'Talend: Manage environments'
  group: user
  oauth: false
  custom_role: true
  user_default: false
  narrows: false
- name: classic_talend.tmc_group_management
  description: 'Talend: Manage groups'
  group: user
  oauth: false
  custom_role: true
  user_default: false
  narrows: false
- name: classic_talend.tmc_operator
  description: 'Talend: Manage operations'
  group: user
  oauth: false
  custom_role: true
  user_default: false
  narrows: false
- name: classic_talend.tmc_pipeline_management
  description: 'Talend: Manage promotions'
  group: user
  oauth: false
  custom_role: true
  user_default: false
  narrows: false
- name: classic_talend.tmc_project_management
  description: 'Talend: Manage projects (including project authorizations)'
  group: user
  oauth: false
  custom_role: true
  user_default: false
  narrows: false
- name: classic_talend.tmc_promotion_execution
  description: 'Talend: Execute promotions'
  group: user
  oauth: false
  custom_role: true
  user_default: false
  narrows: false
- name: classic_talend.tmc_role_management
  description: 'Talend: Manage roles'
  group: user
  oauth: false
  custom_role: true
  user_default: false
  narrows: false
- name: classic_talend.tmc_run_profile_management
  description: 'Talend: Manage run profiles'
  group: user
  oauth: false
  custom_role: true
  user_default: false
  narrows: false
- name: classic_talend.tmc_service_account_management
  description: 'Talend: Manage service accounts'
  group: user
  oauth: false
  custom_role: true
  user_default: false
  narrows: false
- name: classic_talend.tmc_sso_management
  description: 'Talend: Configure single sign-on'
  group: user
  oauth: false
  custom_role: true
  user_default: false
  narrows: false
- name: classic_talend.tmc_static_ip_management
  description: 'Talend: Configure static IP addresses for Cloud Engines'
  group: user
  oauth: false
  custom_role: true
  user_default: false
  narrows: false
- name: classic_talend.tmc_subscription_management
  description: 'Talend: Access subscription information'
  group: user
  oauth: false
  custom_role: true
  user_default: false
  narrows: false
- name: classic_talend.tmc_user_management
  description: 'Talend: Manage users'
  group: user
  oauth: false
  custom_role: true
  user_default: false
  narrows: false
- name: data-connections
  description: Read and manage your data connections
  group: user
  oauth: true
  custom_role: true
  user_default: true
  narrows: false
- name: data-connections:read
  description: Read your data connections
  group: user
  oauth: true
  custom_role: true
  user_default: true
  narrows: true
- name: data-governance-agents
  description: Lets users use Qlik Answers to interact with and manage data governance functionality.
  group: user
  oauth: true
  custom_role: true
  user_default: true
  narrows: false
- name: dataproduct
  description: Create and manage data products.
  group: user
  oauth: true
  custom_role: true
  user_default: true
  narrows: false
- name: dataproduct:consume
  description: Browse and consume data products in the data marketplace.
  group: user
  oauth: true
  custom_role: true
  user_default: true
  narrows: false
- name: dataquality
  description: Compute and read data qualities.
  group: user
  oauth: true
  custom_role: true
  user_default: true
  narrows: false
- name: dataquality:read
  description: Read data quality.
  group: user
  oauth: true
  custom_role: true
  user_default: true
  narrows: true
- name: dataqualityrules
  description: Create, update, or apply validation rules to datasets.
  group: user
  oauth: true
  custom_role: true
  user_default: true
  narrows: false


# --- truncated at 32 KB (42 KB total) ---
# Full source: https://raw.githubusercontent.com/api-evangelist/qliksense/refs/heads/main/scopes/qliksense-scopes.yml

Work with this as data

Every scope set here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for oauth scopes

4 MCP tools reach this

find_scopesBrowse and filter every scope set in the catalog.
apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
resolveTurn a domain, URL or GitHub org into the provider it belongs to.
find_cohortsEvery scored population of providers in the catalog.

All 92 tools →

Call it yourself

curl for this page

This scope set

curl "https://apis.io/api/v1/scopes/qliksense-scopes"

All oauth scopes

curl "https://apis.io/api/v1/scopes?limit=25"

Discovery needs no key. Ratings and market analysis are Pro.

Get an API key

Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.

GitHub Google LinkedIn

A second provider on the same verified email joins the account you already have.