OAuth scopes allow us to specify exactly how an app needs to access a user's monday.com and Microsoft 365 accounts.
Scopes for Microsoft 365
Details of the OAuth required for Microsoft 365 can be found here: Microsoft 365 permissions & admin consent explanation
Scopes for monday.com
Scopes used
| Scope | Description | Why used |
|---|---|---|
me:read | Read a user's profile information | Used by data export automations to display user data |
boards:read | Read user's boards data | Used by data export automations: Export to Word – Templated document generation; Export to HTML email - Templated email generation; Export board data to Excel |
boards:write | Modify user's boards data | Used by data import automations: Import board data from Excel |
workspaces:read | Read user's workspaces data | |
users:read | Read the profile information of the users on the account | Used by data export automations to populate the data for columns of type People |
account:read | Read general information about the account | Used by data export automations to display account data |
updates:read | Read updates and replies the user can see | Used by Export/sync files attached to updates into the SharePoint folder for an item |
assets:read | Read information of assets that the user has access to | Used by Secure Embed; Export/sync files attached to updates into the SharePoint folder for an item |
teams:read | Read information about teams in the account | Used by data export automations to populate the data for columns of type People |
Scopes not used
| Scope | Description |
|---|---|
docs:read | Read user's docs |
docs:write | Modify user's docs |
workspaces:write | Modify user's workspaces data |
users:write | Modify the profile information of the users on the account |
notifications:write | Send notifications on behalf of the user |
updates:write | Post or edit updates on behalf of the user |
tags:read | Read the tags of the account |
webhooks:write | Create and modify webhooks |
webhooks:read | Read existing webhooks configuration |