Strivacity OAuth Scopes

generated: '2026-08-29'
method: searched
source: https://docs.strivacity.com/reference/getting-started-with-the-admin-api and the per-operation "REQUIRED
  API PERMISSION" tables published across https://docs.strivacity.com/llms.txt
docs: https://docs.strivacity.com/reference/getting-started-with-the-admin-api
flow: client_credentials
token_endpoint: https://{tenant}.strivacity.com/oauth2/token
audience_required: true
audience_example: https://{tenant}.strivacity.com
scope_grammar: OPTION:ENTITY where OPTION is one of read, write, delete and ENTITY names the configuration or data
  entity, e.g. read:adaptive_mfa
note: 'Strivacity does not declare oauth2 securitySchemes in its published OpenAPI documents — every spec declares
  only http/bearer — so no scope list is derivable from the specs. The scope catalogue below is harvested from the
  "REQUIRED API PERMISSION" table Strivacity prints on each operation page of its own API reference. Scopes are
  not granted by the token request alone: an API Access policy must first grant the client the scope, and the client
  must be of the "OIDC using no-code components" type.'
scope_count: 106
scopes:
- name: delete:account
  action: delete
  entity: account
  example_operations:
  - Delete an account
  operation_count: 1
- name: delete:account_authenticator
  action: delete
  entity: account_authenticator
  example_operations:
  - Delete authenticator for an account
  operation_count: 1
- name: delete:account_identity
  action: delete
  entity: account_identity
  example_operations:
  - Unlink an external identity from an account
  operation_count: 1
- name: delete:account_proofing
  action: delete
  entity: account_proofing
  example_operations:
  - Delete attempts for an identity verification
  operation_count: 1
- name: delete:admin_account
  action: delete
  entity: admin_account
  example_operations:
  - Delete an admin account
  operation_count: 1
- name: delete:admin_account_authenticator
  action: delete
  entity: admin_account_authenticator
  example_operations:
  - Delete authenticator for an admin account
  operation_count: 1
- name: delete:config_adaptive_mfa
  action: delete
  entity: config_adaptive_mfa
  example_operations:
  - Delete an adaptive access policy
  operation_count: 1
- name: delete:config_admin_api_access
  action: delete
  entity: config_admin_api_access
  example_operations:
  - Delete a client assignment
  operation_count: 1
- name: delete:config_admin_email_service_provider
  action: delete
  entity: config_admin_email_service_provider
  example_operations:
  - Delete email service provider
  operation_count: 1
- name: delete:config_admin_login_provider
  action: delete
  entity: config_admin_login_provider
  example_operations:
  - Delete an admin external login provider
  - Delete claim mapping
  operation_count: 2
- name: delete:config_admin_policy_tag
  action: delete
  entity: config_admin_policy_tag
  example_operations:
  - Delete a policy tag
  operation_count: 1
- name: delete:config_admin_telephony_service_provider
  action: delete
  entity: config_admin_telephony_service_provider
  example_operations:
  - Deactivate telephony service provider by type
  - Delete telephony service provider
  operation_count: 2
- name: delete:config_admin_variable
  action: delete
  entity: config_admin_variable
  example_operations:
  - Delete a variable
  operation_count: 1
- name: delete:config_api_access
  action: delete
  entity: config_api_access
  example_operations:
  - Delete an API security policy
  operation_count: 1
- name: delete:config_application
  action: delete
  entity: config_application
  example_operations:
  - Delete an application
  - Delete an application config A/B testing variant
  operation_count: 2
- name: delete:config_brand
  action: delete
  entity: config_brand
  example_operations:
  - Delete a branding policy
  operation_count: 1
- name: delete:config_claim
  action: delete
  entity: config_claim
  example_operations:
  - Delete a claim
  - Delete a dialect
  - Delete a native claim
  operation_count: 3
- name: delete:config_custom_mfa
  action: delete
  entity: config_custom_mfa
  example_operations:
  - Delete a custom mfa
  operation_count: 1
- name: delete:config_event_hook
  action: delete
  entity: config_event_hook
  example_operations:
  - Delete a lifecycle event hook
  - Delete a tryout function resource
  operation_count: 2
- name: delete:config_identity_proofing
  action: delete
  entity: config_identity_proofing
  example_operations:
  - Delete an identity verification policy
  operation_count: 1
- name: delete:config_identity_store
  action: delete
  entity: config_identity_store
  example_operations:
  - Delete an identity store
  operation_count: 1
- name: delete:config_inbound_connection
  action: delete
  entity: config_inbound_connection
  example_operations:
  - Delete an inbound connection
  operation_count: 1
- name: delete:config_instance_webanalytics
  action: delete
  entity: config_instance_webanalytics
  example_operations:
  - Delete a web analytics integration
  operation_count: 1
- name: delete:config_login_provider
  action: delete
  entity: config_login_provider
  example_operations:
  - Delete a social login provider
  - Delete an enterprise login provider
  - Delete claim mapping
  operation_count: 3
- name: delete:config_notification_policy
  action: delete
  entity: config_notification_policy
  example_operations:
  - Delete a notification policy
  operation_count: 1
- name: delete:config_password_policy
  action: delete
  entity: config_password_policy
  example_operations:
  - Delete a password quality policy
  operation_count: 1
- name: delete:config_self_service_policy
  action: delete
  entity: config_self_service_policy
  example_operations:
  - Delete a self-service policy
  operation_count: 1
- name: read:account
  action: read
  entity: account
  example_operations:
  - Get an account
  - Get an account invitation
  - List account invitations
  - List accounts
  operation_count: 8
- name: read:account_download
  action: read
  entity: account_download
  example_operations:
  - Download account information
  operation_count: 1
- name: read:account_identity
  action: read
  entity: account_identity
  example_operations:
  - List identities for an account
  operation_count: 1
- name: read:account_proofing
  action: read
  entity: account_proofing
  example_operations:
  - List identity verifications
  operation_count: 1
- name: read:admin_account
  action: read
  entity: admin_account
  example_operations:
  - Get an admin account
  - Get an admin account invitation
  - List admin account invitations
  - List admin accounts
  operation_count: 7
- name: read:admin_account_download
  action: read
  entity: admin_account_download
  example_operations:
  - Download admin account information
  operation_count: 1
- name: read:admin_account_identity
  action: read
  entity: admin_account_identity
  example_operations:
  - List admin external login providers
  - List identities for an admin account
  operation_count: 2
- name: read:admin_bulk_operation
  action: read
  entity: admin_bulk_operation
  example_operations:
  - Get errors for a job
  - Get status of a job
  - Query if there is a running bulk operation
  operation_count: 3
- name: read:admin_event_account
  action: read
  entity: admin_event_account
  example_operations:
  - Get an admin account event
  - Get an admin notification event
  - List admin account events
  - List admin notification events
  operation_count: 5
- name: read:admin_event_audit
  action: read
  entity: admin_event_audit
  example_operations:
  - Get an audit log
  - List audit logs
  operation_count: 2
- name: read:config_adaptive_mfa
  action: read
  entity: config_adaptive_mfa
  example_operations:
  - Filter for locations
  - Get an adaptive access policy
  - List adaptive access policies
  - List custom mfas
  operation_count: 4
- name: read:config_admin_adaptive_mfa
  action: read
  entity: config_admin_adaptive_mfa
  example_operations:
  - Filter for locations
  - Get the admin adaptive access policy
  - List custom mfas
  operation_count: 3
- name: read:config_admin_api_access
  action: read
  entity: config_admin_api_access
  example_operations:
  - Get a client assignment
  - Get admin API security policy
  operation_count: 2
- name: read:config_admin_brand
  action: read
  entity: config_admin_brand
  example_operations:
  - Get admin branding policy
  operation_count: 1
- name: read:config_admin_email_service_provider
  action: read
  entity: config_admin_email_service_provider
  example_operations:
  - Get active email service provider
  - Get email service provider
  - List email service providers
  operation_count: 3
- name: read:config_admin_identity_store
  action: read
  entity: config_admin_identity_store
  example_operations:
  - Assign an admin account to a role
  - Get a tag based permission entry
  - Get an admin role
  - List admin account attributes
  operation_count: 11
- name: read:config_admin_login_provider
  action: read
  entity: config_admin_login_provider
  example_operations:
  - Get a claim mapping
  - Get an admin external login provider
  - List admin external login providers
  - List available native claims
  operation_count: 5
- name: read:config_admin_notification_policy
  action: read
  entity: config_admin_notification_policy
  example_operations:
  - Get admin notification policy
  - Get an admin notification template
  - List admin notification templates
  operation_count: 3
- name: read:config_admin_policy_tag
  action: read
  entity: config_admin_policy_tag
  example_operations:
  - Get a policy tag
  - List policy tags
  operation_count: 2
- name: read:config_admin_telephony_service_provider
  action: read
  entity: config_admin_telephony_service_provider
  example_operations:
  - Get active telephony service provider
  - Get telephony service provider
  - List active telephony service providers
  - List telephony service providers
  operation_count: 4
- name: read:config_admin_translation
  action: read
  entity: config_admin_translation
  example_operations:
  - Export a translation
  - List translations
  operation_count: 2
- name: read:config_admin_variable
  action: read
  entity: config_admin_variable
  example_operations:
  - Get a variable
  - List variables
  operation_count: 2
- name: read:config_api_access
  action: read
  entity: config_api_access
  example_operations:
  - Get a scope for an API security policy
  - Get an API security policy
  - Get an API security policy assignment
  - List API security policies
  operation_count: 4
- name: read:config_application
  action: read
  entity: config_application
  example_operations:
  - Get SAML2 metadata for an application client
  - Get a bridge policy
  - Get a bridge policy resource
  - Get an application
  operation_count: 18
- name: read:config_brand
  action: read
  entity: config_brand
  example_operations:
  - Get a branding policy
  - List branding policies
  operation_count: 2
- name: read:config_claim
  action: read
  entity: config_claim
  example_operations:
  - Get a claim
  - Get a dialect
  - Get a native claim
  - List claims
  operation_count: 5
- name: read:config_consent
  action: read
  entity: config_consent
  example_operations:
  - Get a consent
  - List consents
  operation_count: 2
- name: read:config_custom_mfa
  action: read
  entity: config_custom_mfa
  example_operations:
  - Filter for NPM dependency suggestions for a lifecycle event hook
  - Get a custom mfa
  - List NPM dependency versions
  - List custom mfas
  operation_count: 4
- name: read:config_event_hook
  action: read
  entity: config_event_hook
  example_operations:
  - Filter for NPM dependency suggestions for a lifecycle event hook
  - Get a lifecycle event hook
  - Get an integration for lifecycle event hook
  - Get categories for plugin library
  operation_count: 11
- name: read:config_identity_proofing
  action: read
  entity: config_identity_proofing
  example_operations:
  - Get an identity verification policy
  - Get an identity verification step
  - List identity verification policies
  - List identity verification steps
  operation_count: 4
- name: read:config_identity_store
  action: read
  entity: config_identity_store
  example_operations:
  - Add member to a group
  - Assign an admin account to a role
  - Assign groups to an account
  - Assign multiple roles to an organization for an account
  operation_count: 31
- name: read:config_inbound_connection
  action: read
  entity: config_inbound_connection
  example_operations:
  - Get an inbound connection
  - List inbound connections
  operation_count: 2
- name: read:config_instance
  action: read
  entity: config_instance
  example_operations:
  - Get an event streaming configuration
  - Get instance address
  - Get instance config
  - List event streaming configurations
  operation_count: 4
- name: read:config_instance_webanalytics
  action: read
  entity: config_instance_webanalytics
  example_operations:
  - Get a web analytics integration
  - List web analytics integrations
  operation_count: 2
- name: read:config_journey
  action: read
  entity: config_journey
  example_operations:
  - Filter for NPM dependency suggestions for a lifecycle event hook
  - Get an integration for journey
  - Get categories for plugin library
  - Get plugin library for journeys
  operation_count: 5
- name: read:config_login_provider
  action: read
  entity: config_login_provider
  example_operations:
  - Get a claim mapping
  - Get a social login provider
  - Get an enterprise login provider
  - List available native claims
  operation_count: 7
- name: read:config_notification_policy
  action: read
  entity: config_notification_policy
  example_operations:
  - Get a notification policy
  - Get a notification template
  - List notification policies
  - List notification templates
  operation_count: 4
- name: read:config_password_policy
  action: read
  entity: config_password_policy
  example_operations:
  - Export a password restriction
  - Get a password quality policy
  - Get a password word restriction
  - Get total size in MB
  operation_count: 6
- name: read:config_self_service_policy
  action: read
  entity: config_self_service_policy
  example_operations:
  - Get a self-service policy
  - List self-service policies
  operation_count: 2
- name: read:event_account
  action: read
  entity: event_account
  example_operations:
  - Get a notification event
  - Get an account event
  - List account events
  - List descriptors for account events
  operation_count: 5
- name: read:event_hook_log
  action: read
  entity: event_hook_log
  example_operations:
  - Get an event hook log
  - List event hook logs
  operation_count: 2
- name: read:statistic
  action: read
  entity: statistic
  example_operations:
  - Query active account statistics
  - Query connector uptime statistics
  - Query consent acceptance statistics
  - Query statistics
  operation_count: 4
- name: write:account
  action: write
  entity: account
  example_operations:
  - Add member to a group
  - Assign groups to an account
  - Assign multiple roles to an organization for an account
  - Clear sessions for an account
  operation_count: 20
- name: write:account_authenticator
  action: write
  entity: account_authenticator
  example_operations:
  - Change password for an account
  - Create authenticator for an account
  - Request password reset for an account
  operation_count: 3
- name: write:account_identity
  action: write
  entity: account_identity
  example_operations:
  - Force sync a connector identity for an account
  - Update identifier for an account
  operation_count: 2
- name: write:account_impersonation
  action: write
  entity: account_impersonation
  example_operations:
  - Request impersonation of an account
  operation_count: 1
- name: write:account_proofing
  action: write
  entity: account_proofing
  example_operations:
  - Create an identity verification
  - Invalidate an identity verification
  operation_count: 2
- name: write:admin_account
  action: write
  entity: admin_account
  example_operations:
  - Assign an admin account to a role
  - Assign multiple roles to an account
  - Clear sessions for an admin account
  - Create an admin account
  operation_count: 15
- name: write:admin_account_authenticator
  action: write
  entity: admin_account_authenticator
  example_operations:
  - Change password for an admin account
  - Create authenticator for an admin account
  - Request password reset for an admin account
  operation_count: 3
- name: write:admin_account_identity
  action: write
  entity: admin_account_identity
  example_operations:
  - Update identifier for an admin account
  operation_count: 1
- name: write:admin_bulk_operation
  action: write
  entity: admin_bulk_operation
  example_operations:
  - Create a bulk operation job
  operation_count: 1
- name: write:config_adaptive_mfa
  action: write
  entity: config_adaptive_mfa
  example_operations:
  - Create an adaptive access policy
  - Update an adaptive access policy
  operation_count: 2
- name: write:config_admin_adaptive_mfa
  action: write
  entity: config_admin_adaptive_mfa
  example_operations:
  - Update the admin adaptive access policy
  operation_count: 1
- name: write:config_admin_api_access
  action: write
  entity: config_admin_api_access
  example_operations:
  - Create a client assignment
  - Update a client assignment
  operation_count: 2
- name: write:config_admin_brand
  action: write
  entity: config_admin_brand
  example_operations:
  - Update admin branding policy
  operation_count: 1
- name: write:config_admin_email_service_provider
  action: write
  entity: config_admin_email_service_provider
  example_operations:
  - Create email service provider
  - Set active email service provider
  - Update email service provider
  operation_count: 3
- name: write:config_admin_identity_store
  action: write
  entity: config_admin_identity_store
  example_operations:
  - Create an admin role
  - Create tag based permissions for an admin role
  - Delete a tag based permission entry
  - Delete an admin role
  operation_count: 6
- name: write:config_admin_login_provider
  action: write
  entity: config_admin_login_provider
  example_operations:
  - Create a claim mapping
  - Create an admin external login provider
  - Update an admin external login provider
  - Update claim mapping
  operation_count: 4
- name: write:config_admin_notification_policy
  action: write
  entity: config_admin_notification_policy
  example_operations:
  - Update admin notification policy
  - Update an admin notification template (SMS)
  - Update an admin notification template (email)
  operation_count: 3
- name: write:config_admin_policy_tag
  action: write
  entity: config_admin_policy_tag
  example_operations:
  - Create a policy tag
  - Update a policy tag
  operation_count: 2
- name: write:config_admin_telephony_service_provider
  action: write
  entity: config_admin_telephony_service_provider
  example_operations:
  - Activate telephony service provider
  - Create telephony service provider
  - Update telephony service provider
  operation_count: 3
- name: write:config_admin_translation
  action: write
  entity: config_admin_translation
  example_operations:
  - Disable a translation
  - Enable a translation
  - Import a translation
  - Reset a translation
  operation_count: 4
- name: write:config_admin_variable
  action: write
  entity: config_admin_variable
  example_operations:
  - Create a variable
  - Update a variable
  operation_count: 2
- name: write:config_api_access
  action: write
  entity: config_api_access
  example_operations:
  - Assign a client to an API security policy
  - Create a scope for an API security policy
  - Create an API security policy
  - Delete a scope for an API security policy
  operation_count: 8
- name: write:config_application
  action: write
  entity: config_application
  example_operations:
  - Create a bridge policy
  - Create a bridge policy resource
  - Create an application
  - Create an application client
  operation_count: 18
- name: write:config_brand
  action: write
  entity: config_brand
  example_operations:
  - Create a branding policy
  - Update a branding policy
  operation_count: 2
- name: write:config_claim
  action: write
  entity: config_claim
  example_operations:
  - Create a claim
  - Create a dialect
  - Create a native claim
  - Update a claim
  operation_count: 6
- name: write:config_consent
  action: write
  entity: config_consent
  example_operations:
  - Create a consent
  - Update a consent
  operation_count: 2
- name: write:config_custom_mfa
  action: write
  entity: config_custom_mfa
  example_operations:
  - Create a custom mfa policy
  - Update a custom mfa
  operation_count: 2
- name: write:config_event_hook
  action: write
  entity: config_event_hook
  example_operations:
  - Call a tryout function resource
  - Create a lifecycle event hook
  - Create a tryout function resource
  - Deploy a lifecycle event hook
  operation_count: 5
- name: write:config_identity_proofing
  action: write
  entity: config_identity_proofing
  example_operations:
  - Create an identity verification policy
  - Create an identity verification step
  - Delete an identity verification step
  - Reorder verification steps
  operation_count: 6
- name: write:config_identity_store
  action: write
  entity: config_identity_store
  example_operations:
  - Assign API security policy to a group
  - Create a child attribute
  - Create a group
  - Create a role
  operation_count: 26
- name: write:config_inbound_connection
  action: write
  entity: config_inbound_connection
  example_operations:
  - Create an inbound connection
  - Forces a sync for inbound connection
  - Update an inbound connection
  operation_count: 3
- name: write:config_instance
  action: write
  entity: config_instance
  example_operations:
  - Create an event streaming configuration
  - Delete an event streaming configuration
  - Test an event streaming configuration
  - Update an event streaming configuration
  operation_count: 5
- name: write:config_instance_webanalytics
  action: write
  entity: config_instance_webanalytics
  example_operations:
  - Create a web analytics integration
  - Update a web analytics integration
  operation_count: 2
- name: write:config_login_provider
  action: write
  entity: config_login_provider
  example_operations:
  - Create a claim mapping
  - Create a social login provider
  - Create an enterprise login provider
  - Update a social login provider
  operation_count: 6
- name: write:config_notification_policy
  action: write
  entity: config_notification_policy
  example_operations:
  - Create a notification policy
  - Update a notification policy
  - Update a notification template (SMS)
  - Update a notification template (email)
  operation_count: 4
- name: write:config_password_policy
  action: write
  entity: config_password_policy
  example_operations:
  - Create a password quality policy
  - Create a password word restriction
  - Delete a password word restriction
  - Update a password quality policy
  operation_count: 5
- name: write:config_self_service_policy
  action: write
  entity: config_self_service_policy
  example_operations:
  - Create a self-service policy
  - Update a self-service policy
  operation_count: 2