OAuth2 scopes
OAuth2 scopes are an industry standard that provides a layer of additional authorization. They are designed to govern an authorized application's API access based on a preconfigured list of scopes permitted for the authorized application/client, as well as resource/owner consent during authorization.