8.22OAuth scopes

OAuth configuration may restrict what the client can do.

Think:

OAuth token

not as:

“universal Salesforce key”

but:

“credential representing specific approved access.”

The exact scopes depend on your Salesforce setup.

You don't need to memorize scope names here.

Just understand the principle:

minimum required OAuth access