Objective
This article explains how to review and adjust the OAuth scopes granted to one of your organization's OAuth applications, so it has only the API access it actually needs.
Product
Twilio Organizations
Environment
Twilio Console
User Account Permission/Role(s) Required
OAuth applications update permission. Without it, the permissions are shown read-only and the Edit action is not available.
Procedure
- In the Twilio Console, select Settings in the left sidebar.
- Select Organization settings, then Organization API access.
- On the OAuth applications tab, select the application you want to change.
- Open the Access settings tab. The page recommends giving the least privileged access initially, since it can be changed later.
- Select Edit.
- Under Select OAuth Scopes, tick the permissions the application should have and clear the ones it should not.
- Select Save. A confirmation appears: "OAuth scopes updated successfully."
Additional Information
- At least one permission must be selected. Saving with none shows "Please enter at least one permission." and nothing is changed.
- Select Cancel to discard your changes and restore the permissions currently stored.
- If the update fails, "Failed to update OAuth scopes. Please try again." appears and the stored permissions are unchanged.
- If the page cannot be loaded, it shows "Unable to load Access settings" and suggests reloading.
- Changing permissions affects the access tokens the application obtains from now on; the application does not need to be recreated.
This content was generated by AI and reviewed, edited, and verified by a human.