Zoho People · OAuth Scopes

Zoho People OAuth Scopes

OAuth 2.0 derived

Zoho People publishes 13 OAuth 2.0 scopes via the authorizationCode flow. Scopes are the fine-grained permissions an application requests at authorization time to act against the Zoho People API on a user’s behalf.

Tokens are issued from https://accounts.zoho.com/oauth/v2/token.

This index is generated from the provider’s OpenAPI security definitions (and, where available, its documented scope reference) and refreshes on every APIs.io network build. Browse every provider’s scopes at scopes.apis.io.

HRHRMSHuman ResourcesHRISEmployee ManagementAttendanceLeave ManagementTime TrackingPerformance ManagementOnboardingZohoOAuth 2.0
Scopes: 13 Flows: authorizationCode Method: derived

OAuth endpoints

Authorization URL
https://accounts.zoho.com/oauth/v2/auth
Token URL
https://accounts.zoho.com/oauth/v2/token
Flows
authorizationCode

Scopes (13)

ScopeDescriptionFlows
ZohoPeople.attendance.ALL Full access to attendance operations authorizationCode
ZohoPeople.automation.ALL Full access to automation / workflows authorizationCode
ZohoPeople.dashboard.ALL Full access to dashboard reads authorizationCode
ZohoPeople.employee.ALL Full access to employee records authorizationCode
ZohoPeople.forms.ALL Full access to form records authorizationCode
ZohoPeople.forms.CREATE Create form records authorizationCode
ZohoPeople.forms.READ Read form records authorizationCode
ZohoPeople.forms.UPDATE Update form records authorizationCode
ZohoPeople.leave.ALL Full access to leave operations authorizationCode
ZohoPeople.leave.CREATE Submit leave requests authorizationCode
ZohoPeople.leave.READ Read leave records authorizationCode
ZohoPeople.leave.UPDATE Update leave requests authorizationCode
ZohoPeople.timetracker.ALL Full access to time-tracker operations authorizationCode

Source

OAuth Scopes

zoho-people-scopes.yml Raw ↑
generated: '2026-07-11'
method: derived
source: openapi/zoho-people-openapi.yml
schemes:
- name: ZohoOAuth2
  source: openapi/zoho-people-openapi.yml
  flows:
  - flow: authorizationCode
    authorizationUrl: https://accounts.zoho.com/oauth/v2/auth
    tokenUrl: https://accounts.zoho.com/oauth/v2/token
  description: |-
    Zoho Accounts OAuth 2.0 — Authorization Code grant. Access tokens
    live for 1 hour; refresh tokens are long-lived until revoked.
    Scope syntax is `ZOHOPEOPLE.<scope>.<operation>` where scope is
    one of employee, forms, dashboard, automation, timetracker,
    attendance, leave; operation is ALL, READ, CREATE, UPDATE, or
    DELETE.
scopes:
- scope: ZohoPeople.attendance.ALL
  description: Full access to attendance operations
  flows:
  - authorizationCode
  sources:
  - openapi/zoho-people-openapi.yml
- scope: ZohoPeople.automation.ALL
  description: Full access to automation / workflows
  flows:
  - authorizationCode
  sources:
  - openapi/zoho-people-openapi.yml
- scope: ZohoPeople.dashboard.ALL
  description: Full access to dashboard reads
  flows:
  - authorizationCode
  sources:
  - openapi/zoho-people-openapi.yml
- scope: ZohoPeople.employee.ALL
  description: Full access to employee records
  flows:
  - authorizationCode
  sources:
  - openapi/zoho-people-openapi.yml
- scope: ZohoPeople.forms.ALL
  description: Full access to form records
  flows:
  - authorizationCode
  sources:
  - openapi/zoho-people-openapi.yml
- scope: ZohoPeople.forms.CREATE
  description: Create form records
  flows:
  - authorizationCode
  sources:
  - openapi/zoho-people-openapi.yml
- scope: ZohoPeople.forms.READ
  description: Read form records
  flows:
  - authorizationCode
  sources:
  - openapi/zoho-people-openapi.yml
- scope: ZohoPeople.forms.UPDATE
  description: Update form records
  flows:
  - authorizationCode
  sources:
  - openapi/zoho-people-openapi.yml
- scope: ZohoPeople.leave.ALL
  description: Full access to leave operations
  flows:
  - authorizationCode
  sources:
  - openapi/zoho-people-openapi.yml
- scope: ZohoPeople.leave.CREATE
  description: Submit leave requests
  flows:
  - authorizationCode
  sources:
  - openapi/zoho-people-openapi.yml
- scope: ZohoPeople.leave.READ
  description: Read leave records
  flows:
  - authorizationCode
  sources:
  - openapi/zoho-people-openapi.yml
- scope: ZohoPeople.leave.UPDATE
  description: Update leave requests
  flows:
  - authorizationCode
  sources:
  - openapi/zoho-people-openapi.yml
- scope: ZohoPeople.timetracker.ALL
  description: Full access to time-tracker operations
  flows:
  - authorizationCode
  sources:
  - openapi/zoho-people-openapi.yml