# API Scope Missing

**URL:** <https://developer.sailpoint.com/discuss/t/api-scope-missing/11677>\
**Category:** SHF Discussion and Questions\
**Tags:** identity-security-cloud, apis\
**Created:** [May 26, 2023, 7:01pm UTC](https://developer.sailpoint.com/discuss/t/api-scope-missing/11677 "2023-05-26T19:01:40Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![clstromgren](https://sea1.discourse-cdn.com/sailpoint/discuss/user_avatar/developer.sailpoint.com/clstromgren/32/2284_2.png) [@clstromgren](https://developer.sailpoint.com/discuss/u/clstromgren)\
**Post date:** [May 26, 2023, 7:01pm UTC](https://developer.sailpoint.com/discuss/t/api-scope-missing/11677/1 "2023-05-26T19:01:40Z")

</div>

The api call at [create-access-request | SailPoint Developer Community](https://developer.sailpoint.com/idn/api/v3/create-access-request) lists the scope required as idn:access-request:create, this scope is not available to assign to clients. Is it just missing from the list (bug), or is the wrong scope documented?

cc: @Yoginder00

 ![image](https://global.discourse-cdn.com/sailpoint/original/2X/b/b0d29297fc3df495252599c1e80a499c20f356d8.png)

---

<div class="post-metadata">

**Author:** ![ethompson](https://sea1.discourse-cdn.com/sailpoint/discuss/user_avatar/developer.sailpoint.com/ethompson/32/17298_2.png) [@ethompson](https://developer.sailpoint.com/discuss/u/ethompson)\
**Post date:** [June 2, 2023, 8:00pm UTC](https://developer.sailpoint.com/discuss/t/api-scope-missing/11677/2 "2023-06-02T20:00:59Z")

</div>

It is the same for PAT so I assume since the :manage has create under it, that is the correct scope, but I agree the doc should have “idn:access-request:manage” instead.

PAT for reference:

 ![image](https://global.discourse-cdn.com/sailpoint/original/2X/c/cf591aec4b992cbc1d0ebe830d81f9e3a6072f9c.png)

---

<div class="post-metadata">

**Author:** ![colin\_mckibben](https://sea1.discourse-cdn.com/sailpoint/discuss/user_avatar/developer.sailpoint.com/colin_mckibben/32/37182_2.png) [@colin\_mckibben](https://developer.sailpoint.com/discuss/u/colin_mckibben)\
**Post date:** [July 5, 2023, 2:17pm UTC](https://developer.sailpoint.com/discuss/t/api-scope-missing/11677/3 "2023-07-05T14:17:59Z")

</div>

Thanks for pointing this out @ethompson. `idn:access-request:manage` is the correct scope for giving create privileges to tokens. I have created a documentation ticket to fix this.

---

<div class="post-metadata">

**Author:** ![system](https://global.discourse-cdn.com/sailpoint/original/2X/f/f2136700ed5e3703e0b85e02f6be799dacca7735.png) [@system](https://developer.sailpoint.com/discuss/u/system)\
**Post date:** [September 3, 2023, 2:18pm UTC](https://developer.sailpoint.com/discuss/t/api-scope-missing/11677/4 "2023-09-03T14:18:35Z")

</div>

This topic was automatically closed 60 days after the last reply. New replies are no longer allowed.