API Integration Permission Scopes

To let your API integration access Marketing Cloud functionality, assign it permissions, or scopes, in Installed Packages. Assign only the scopes that your package needs. A scope usually represents a collection of related permissions and behaviors in Marketing Cloud. Review REST Permissions and Scopes to see how these scopes map to permission IDs and API resources.

Server-to-server integrations using the client credentials grant type perform tasks on behalf of the integration. The scopes that are assigned to these integrations represent which Marketing Cloud functionality the integration can access.

Web app and public app integrations using the authorization code grant type perform tasks on behalf of an end user and use the intersection of the app’s permissions and the user’s permissions. The scopes that are assigned to these integrations represent which Marketing Cloud functionality the integration can access. However, the scopes don’t account for the functionality that the end user can access. Request and compare scopes against user permissions by calling the v2/userinfo resource after your app completes the authorization code flow.

This list shows the available scopes you can request.

  • Email - Read, Write, Send
    Email message management and sending
  • OTT - Read, Send
    Chat message management and sending
  • Push - Read, Write, Send
    Push message management and sending
  • SMS - Read, Write, Send
    SMS message management and sending
  • Social - Read, Write, Publish, Post
  • Web - Read, Write, Publish
  • Documents and Images - Read, Write
    Documents and images in the portfolio or image library
  • Saved Content - Read, Write
    Content saved in content areas, surveys, and coupons
  • Automations - Read, Write, Execute
    Programs and activities
  • Journeys (Interactions) - Read, Write, Execute
  • Audiences - Read, Write
  • Lists and Subscribers - Read, Write
    Subscribers, lists, groups, filters, measures, and preference management
  • Data Extensions - Read, Write
    Data extensions and relationships
  • File Locations - Read, Write
  • Tracking Events - Read
    Tracking event data associated with channels

  • Approvals - Write
    Create, manage, and delete approval items. Edit and delete approval comments. Enable approvals for any channel.

  • Calendar - Read, Write
    Calendar event management

  • Campaign - Read, Write
    Campaign management and association

  • Tags - Write\

  • Workflows - Write
    Create, manage, and delete workflow teams. Add and remove users to teams. Create and edit workflow definitions.

  • Organizations - Read, Write
    Accounts, business units, and child accounts
  • OTT Channels - Read, Write
    Chat message resource provisioning
  • Users - Read, Write
    Users, roles, and permissions
  • Webhooks - Read, Write