OAuth Scopes

OAuth scopes, or permissions, let you specify exactly how your application needs to access a Podium user’s account.

You should only specify the scopes you need to satisfy your use case and no more. Scopes are the most common reason that apps aren't approved when it comes to reviews.

User permissions

The user that authorizes your app must have permission to access the corresponding feature. For example, if the user does not have permission to view the invoices page in Podium, then your request to the invoice resource will return a 403 - Forbidden status.

Summary of all OAuth scopes

The following scopes are available for an application to obtain authorization from a user.

ScopesDisplayed Scope to UserDescription
write_appointmentsWrite AppointmentsGrant access to create appointments in the user's locations.
read_campaignsRead campaignsGrant access to read campaign data for the user's locations.
write_campaign_messagesWrite campaign messagesGrant access to write campaign messages for the user's locations.
write_contactsWrite ContactsGrant access to create, update, and delete contact data for the user's locations.
write_data_feed_eventTrigger a data feed eventGrant access to trigger data feed events for the user's locations.
read_feedbackRead feedback dataGrant access to all feedback data for the user's locations.
read_locationsRead location dataGrant access to the user's locations.
read_messagesRead message dataGrant access to all messages for the user's locations.
write_messagesWrite messagesGrant access to write messages in the user's locations.
read_organizationsRead organization dataGrant access to the user's organization.
read_paymentsRead payments dataGrant access to all payment data for to the user's locations.
write_paymentsWrite payments dataGrant access to create payments for all the user's locations.
read_reviewsRead reviews dataGrant access to all review data for the user's locations.
write_reviewsWrite reviews dataGrant access to create reviews data for all the user's locations.
read_usersRead user dataGrant access to all user data for the user's locations.
read_contactsRead contact dataGrant access to all contact data for the user's locations.
write_locationsWrite location dataGrant access to write locations.