API security
Authorization Scope
An authorization scope is the declared perimeter of access granted to a client application or service.
Definition
An authorization scope is the expression of what a token holder is allowed to do or access. It defines the functional perimeter attached to the delegated access and helps limit the token to a specific purpose rather than broad uncontrolled use.
The Ariovis perspective
Tokens are part of an access architecture, not a substitute for identity governance or authorization. Their scope, lifetime, validation and revocation must match the risk of the API and user journey.
Related services
Related terms
Explore this category
These concepts matter most inside a real project.
The first conversation helps establish your context, the systems involved and the next useful decision.