generated: '2026-09-09'
method: searched
source: https://docs.fenergox.com/developer-hub/api-and-system-security/api-scopes-and-access-control
docs: https://docs.fenergox.com/developer-hub/api-and-system-security/api-scopes-and-access-control
note: 'Fenergo publishes a complete fenx.* scope registry on its documentation portal and a live OpenID Connect
  discovery document. The two are recorded separately: `scopes` below is the DOCUMENTED registry (105 scopes, verbatim
  names/display names/descriptions from the docs table); `discovery_only_scopes` are values the live /.well-known/openid-configuration
  advertises that the docs table does not list. The harvested OpenAPI contracts themselves declare almost no oauth2
  scopes — the CLM services use a bearer apiKey scheme — so the scope model lives in the docs and the IdP, not in
  the specs.'
authorization_server:
  issuer: https://identity.fenergox.com
  discovery: https://identity.fenergox.com/.well-known/openid-configuration
  http_status: 200
  token_endpoint: https://identity.fenergox.com/connect/token
  authorization_endpoint: https://identity.fenergox.com/connect/authorize
  jwks_uri: https://identity.fenergox.com/.well-known/openid-configuration/jwks
  introspection_endpoint: https://identity.fenergox.com/connect/introspect
  revocation_endpoint: https://identity.fenergox.com/connect/revocation
  grant_types_supported:
  - authorization_code
  - client_credentials
  - refresh_token
  - implicit
  - password
  - urn:ietf:params:oauth:grant-type:device_code
  - urn:openid:params:grant-type:ciba
  - external-token-exchange
  token_endpoint_auth_methods_supported:
  - client_secret_basic
  - client_secret_post
  - tls_client_auth
  - self_signed_tls_client_auth
  code_challenge_methods_supported:
  - plain
  - S256
  software: Duende IdentityServer (Enterprise Edition)
  note: Regional token endpoints follow https://identity.{region}.fenergox.com/connect/token; mTLS token endpoint
    is https://api-mtls.fenergox.com/sts/connect/mtls/token.
flows:
- flow: clientCredentials
  used_for: machine-to-machine API integrations (recommended)
  token_ttl_seconds: 900
  note: Scope parameter is space-separated; a 300-character limit applies to the scope string on a token request.
- flow: authorizationCode
  used_for: Fenergo UI users on non-SSO tenants (OIDC)
- flow: external-token-exchange
  used_for: headless client portals that use Fenergo APIs but not Fenergo authentication
granularity:
  model: per-domain read/write
  note: 'Fenergo has not moved to method-level granularity: .read scopes align to the Query APIs and .write scopes
    align to the Command APIs. Client-credential grants bypass UI access layers and field-level permissions — a
    credential holding fenx.entitydata.read reads ALL entity data.'
  source: https://docs.fenergox.com/api-docs/tenant-access
scope_count: 105
scopes:
- scope: fenx.agents.read
  name: Fen-X AI Agents API Read
  description: Gives read access to AI Agent models
  flows:
  - clientCredentials
  sources:
  - https://docs.fenergox.com/developer-hub/api-and-system-security/api-scopes-and-access-control
- scope: fenx.agents.write
  name: Fen-X AI Agents API Write
  description: Gives write access to AI Agent models
  flows:
  - clientCredentials
  sources:
  - https://docs.fenergox.com/developer-hub/api-and-system-security/api-scopes-and-access-control
- scope: fenx.association.read
  name: Fen-X Association API Read
  description: Gives read access to Associations
  flows:
  - clientCredentials
  sources:
  - https://docs.fenergox.com/developer-hub/api-and-system-security/api-scopes-and-access-control
- scope: fenx.association.write
  name: Fen-X Association API Write
  description: Gives write access to Associations
  flows:
  - clientCredentials
  sources:
  - https://docs.fenergox.com/developer-hub/api-and-system-security/api-scopes-and-access-control
- scope: fenx.audit.read
  name: Fen-X Audit API Read
  description: Gives read access to Audit
  flows:
  - clientCredentials
  sources:
  - https://docs.fenergox.com/developer-hub/api-and-system-security/api-scopes-and-access-control
- scope: fenx.authorization.read
  name: Fen-X Authorization API Read
  description: Gives read access to Authorization
  flows:
  - clientCredentials
  sources:
  - https://docs.fenergox.com/developer-hub/api-and-system-security/api-scopes-and-access-control
- scope: fenx.authorization.write
  name: Fen-X Authorization API Write
  description: Gives write access to Authorization
  flows:
  - clientCredentials
  sources:
  - https://docs.fenergox.com/developer-hub/api-and-system-security/api-scopes-and-access-control
- scope: fenx.bulkload.read
  name: Fen-X Bulk Load API Read
  description: Gives read access to Bulk Load
  flows:
  - clientCredentials
  sources:
  - https://docs.fenergox.com/developer-hub/api-and-system-security/api-scopes-and-access-control
- scope: fenx.bulkload.write
  name: Fen-X Bulk Load API Write
  description: Gives write access to Bulk Load
  flows:
  - clientCredentials
  sources:
  - https://docs.fenergox.com/developer-hub/api-and-system-security/api-scopes-and-access-control
- scope: fenx.businessmetrics.read
  name: Fen-X Business Metrics API Read
  description: Gives read access to Business Metrics
  flows:
  - clientCredentials
  sources:
  - https://docs.fenergox.com/developer-hub/api-and-system-security/api-scopes-and-access-control
- scope: fenx.businessmetrics.write
  name: Fen-X Business Metrics API Write
  description: Gives write access to Business Metrics
  flows:
  - clientCredentials
  sources:
  - https://docs.fenergox.com/developer-hub/api-and-system-security/api-scopes-and-access-control
- scope: fenx.changemanagement.read
  name: Fen-X Change Management API Read
  description: Gives read access to Change Management
  flows:
  - clientCredentials
  sources:
  - https://docs.fenergox.com/developer-hub/api-and-system-security/api-scopes-and-access-control
- scope: fenx.changemanagement.write
  name: Fen-X Change Management API Write
  description: Gives write access to Change Management
  flows:
  - clientCredentials
  sources:
  - https://docs.fenergox.com/developer-hub/api-and-system-security/api-scopes-and-access-control
- scope: fenx.comments
  name: Fen-X Comments GraphQL API
  description: Gives full access to Comments GraphQL API
  flows:
  - clientCredentials
  sources:
  - https://docs.fenergox.com/developer-hub/api-and-system-security/api-scopes-and-access-control
- scope: fenx.configbaseline.read
  name: Fen-X Config Baseline API Read
  description: Gives read access to Config Baseline
  flows:
  - clientCredentials
  sources:
  - https://docs.fenergox.com/developer-hub/api-and-system-security/api-scopes-and-access-control
- scope: fenx.configbaseline.write
  name: Fen-X Config Baseline API Write
  description: Gives write access to Config Baseline
  flows:
  - clientCredentials
  sources:
  - https://docs.fenergox.com/developer-hub/api-and-system-security/api-scopes-and-access-control
- scope: fenx.configreleasehub.read
  name: Fen-X Config Release Hub API Read
  description: Gives read access to Config Release Hub
  flows:
  - clientCredentials
  sources:
  - https://docs.fenergox.com/developer-hub/api-and-system-security/api-scopes-and-access-control
- scope: fenx.configreleasehub.write
  name: Fen-X Config Release Hub API Write
  description: Gives write access to Config Release Hub
  flows:
  - clientCredentials
  sources:
  - https://docs.fenergox.com/developer-hub/api-and-system-security/api-scopes-and-access-control
- scope: fenx.creditassessment.read
  name: Fen-X Credit Assessment API Read
  description: Gives read access to Credit Assessment
  flows:
  - clientCredentials
  sources:
  - https://docs.fenergox.com/developer-hub/api-and-system-security/api-scopes-and-access-control
- scope: fenx.creditassessment.write
  name: Fen-X Credit Assessment API Write
  description: Gives write access to Credit Assessment
  flows:
  - clientCredentials
  sources:
  - https://docs.fenergox.com/developer-hub/api-and-system-security/api-scopes-and-access-control
- scope: fenx.creditscreening.read
  name: Fen-X Credit Screening API Read
  description: Gives read access to Credit Screening
  flows:
  - clientCredentials
  sources:
  - https://docs.fenergox.com/developer-hub/api-and-system-security/api-scopes-and-access-control
- scope: fenx.creditscreening.write
  name: Fen-X Credit Screening API Write
  description: Gives write access to Credit Screening
  flows:
  - clientCredentials
  sources:
  - https://docs.fenergox.com/developer-hub/api-and-system-security/api-scopes-and-access-control
- scope: fenx.dashboard.advanced.read
  name: Fen-X Advanced Dashboard API Read
  description: Gives read access to Advanced Dashboard
  flows:
  - clientCredentials
  sources:
  - https://docs.fenergox.com/developer-hub/api-and-system-security/api-scopes-and-access-control
- scope: fenx.dashboard.advanced.write
  name: Fen-X Advanced Dashboard API Write
  description: Gives write access to Advanced Dashboard
  flows:
  - clientCredentials
  sources:
  - https://docs.fenergox.com/developer-hub/api-and-system-security/api-scopes-and-access-control
- scope: fenx.dashboards.read
  name: Fen-X Dashboards API Read
  description: Gives read access to Dashboards
  flows:
  - clientCredentials
  sources:
  - https://docs.fenergox.com/developer-hub/api-and-system-security/api-scopes-and-access-control
- scope: fenx.datamigration.read
  name: Fen-X Data Migration API Read
  description: Gives read access to Data Migration
  flows:
  - clientCredentials
  sources:
  - https://docs.fenergox.com/developer-hub/api-and-system-security/api-scopes-and-access-control
- scope: fenx.datamigration.write
  name: Fen-X Data Migration API Write
  description: Gives write access to Data Migration
  flows:
  - clientCredentials
  sources:
  - https://docs.fenergox.com/developer-hub/api-and-system-security/api-scopes-and-access-control
- scope: fenx.dataprotection.deleteentitydata
  name: Fen-X Data Protection API Delete Entity
  description: Gives access to Data Protection Deletion Endpoint
  flows:
  - clientCredentials
  sources:
  - https://docs.fenergox.com/developer-hub/api-and-system-security/api-scopes-and-access-control
- scope: fenx.dataprotection.read
  name: Fen-X Data Protection API Read
  description: Gives write access to Data Protection
  flows:
  - clientCredentials
  sources:
  - https://docs.fenergox.com/developer-hub/api-and-system-security/api-scopes-and-access-control
- scope: fenx.dataprotection.write
  name: Fen-X Data Protection API Write
  description: Gives write access to Data Protection
  flows:
  - clientCredentials
  sources:
  - https://docs.fenergox.com/developer-hub/api-and-system-security/api-scopes-and-access-control
- scope: fenx.digitalidv.read
  name: Fen-X DigitalId&V API Read
  description: Gives read access to DigitalId
  flows:
  - clientCredentials
  sources:
  - https://docs.fenergox.com/developer-hub/api-and-system-security/api-scopes-and-access-control
- scope: fenx.digitalidv.write
  name: Fen-X DigitalId&V API Write
  description: Gives write access to DigitalId&V
  flows:
  - clientCredentials
  sources:
  - https://docs.fenergox.com/developer-hub/api-and-system-security/api-scopes-and-access-control
- scope: fenx.docgen.read
  name: Fen-X Document Generation API Read
  description: Gives read access to Document Generation
  flows:
  - clientCredentials
  sources:
  - https://docs.fenergox.com/developer-hub/api-and-system-security/api-scopes-and-access-control
- scope: fenx.docgen.write
  name: Fen-X Document Generation API Write
  description: Gives write access to Document Generation
  flows:
  - clientCredentials
  sources:
  - https://docs.fenergox.com/developer-hub/api-and-system-security/api-scopes-and-access-control
- scope: fenx.documents.read
  name: Fen-X Documents API Read
  description: Gives read access to Documents
  flows:
  - clientCredentials
  sources:
  - https://docs.fenergox.com/developer-hub/api-and-system-security/api-scopes-and-access-control
- scope: fenx.documents.write
  name: Fen-X Documents API Write
  description: Gives write access to Documents
  flows:
  - clientCredentials
  sources:
  - https://docs.fenergox.com/developer-hub/api-and-system-security/api-scopes-and-access-control
- scope: fenx.entitydata.read
  name: Fen-X Entity Data API Read
  description: Gives read access to Entity Data
  flows:
  - clientCredentials
  sources:
  - https://docs.fenergox.com/developer-hub/api-and-system-security/api-scopes-and-access-control
- scope: fenx.entitydata.write
  name: Fen-X Entity Data API Write
  description: Gives write access to Entity Data
  flows:
  - clientCredentials
  sources:
  - https://docs.fenergox.com/developer-hub/api-and-system-security/api-scopes-and-access-control
- scope: fenx.etl.write
  name: Fen-X ETL API Read and Write
  description: Gives read and write access to ETL
  flows:
  - clientCredentials
  sources:
  - https://docs.fenergox.com/developer-hub/api-and-system-security/api-scopes-and-access-control
- scope: fenx.eventingress
  name: Fen-X Event Ingress API
  description: Allows full access to Event Ingress API
  flows:
  - clientCredentials
  sources:
  - https://docs.fenergox.com/developer-hub/api-and-system-security/api-scopes-and-access-control
- scope: fenx.eventnotifications
  name: Fen-X Event Notifications API
  description: Allows full access to Event Notifications API
  flows:
  - clientCredentials
  sources:
  - https://docs.fenergox.com/developer-hub/api-and-system-security/api-scopes-and-access-control
- scope: fenx.externalauthentication.read
  name: Fen-X External Authentication API Read
  description: Gives read access to External Authentication
  flows:
  - clientCredentials
  sources:
  - https://docs.fenergox.com/developer-hub/api-and-system-security/api-scopes-and-access-control
- scope: fenx.externalauthentication.write
  name: Fen-X External Authentication API Write
  description: Gives write access to External Authentication
  flows:
  - clientCredentials
  sources:
  - https://docs.fenergox.com/developer-hub/api-and-system-security/api-scopes-and-access-control
- scope: fenx.externaldata.outreach.read
  name: Fen-X ExternalData Outreach API Read
  description: Gives read access to ExternalData Outreach
  flows:
  - clientCredentials
  sources:
  - https://docs.fenergox.com/developer-hub/api-and-system-security/api-scopes-and-access-control
- scope: fenx.externaldata.outreach.write
  name: Fen-X ExternalData Outreach API Write
  description: Gives write access to ExternalData Outreach
  flows:
  - clientCredentials
  sources:
  - https://docs.fenergox.com/developer-hub/api-and-system-security/api-scopes-and-access-control
- scope: fenx.externaldata.read
  name: Fen-X ExternalData API Read
  description: Gives read access to ExternalData
  flows:
  - clientCredentials
  sources:
  - https://docs.fenergox.com/developer-hub/api-and-system-security/api-scopes-and-access-control
- scope: fenx.externaldata.write
  name: Fen-X ExternalData API Write
  description: Gives write access to ExternalData
  flows:
  - clientCredentials
  sources:
  - https://docs.fenergox.com/developer-hub/api-and-system-security/api-scopes-and-access-control
- scope: fenx.externaldatapolicy.read
  name: Fen-X ExternalDataPolicy API Read
  description: Gives read access to ExternalDataPolicy
  flows:
  - clientCredentials
  sources:
  - https://docs.fenergox.com/developer-hub/api-and-system-security/api-scopes-and-access-control
- scope: fenx.externaldatapolicy.write
  name: Fen-X ExternalDataPolicy API Write
  description: Gives write access to ExternalDataPolicy
  flows:
  - clientCredentials
  sources:
  - https://docs.fenergox.com/developer-hub/api-and-system-security/api-scopes-and-access-control
- scope: fenx.financialanalysis.read
  name: Fen-X Financial Analysis API Read
  description: Gives read access to Financial Analysis
  flows:
  - clientCredentials
  sources:
  - https://docs.fenergox.com/developer-hub/api-and-system-security/api-scopes-and-access-control
- scope: fenx.financialanalysis.write
  name: Fen-X Financial Analysis API Write
  description: Gives write access to Financial Analysis
  flows:
  - clientCredentials
  sources:
  - https://docs.fenergox.com/developer-hub/api-and-system-security/api-scopes-and-access-control
- scope: fenx.identity.usermanagement.read
  name: Fen-X Identity User management API Read
  description: Gives read access to Identity User management
  flows:
  - clientCredentials
  sources:
  - https://docs.fenergox.com/developer-hub/api-and-system-security/api-scopes-and-access-control
- scope: fenx.identity.usermanagement.write
  name: Fen-X Identity User management API Write
  description: Gives write access to Identity User management
  flows:
  - clientCredentials
  sources:
  - https://docs.fenergox.com/developer-hub/api-and-system-security/api-scopes-and-access-control
- scope: fenx.identity.clientmanagement.read
  name: Fen-X Identity Client management API Read
  description: Gives read access to Identity Client management
  flows:
  - clientCredentials
  sources:
  - https://docs.fenergox.com/developer-hub/api-and-system-security/api-scopes-and-access-control
- scope: fenx.identity.clientmanagement.write
  name: Fen-X Identity Client management API Write
  description: Gives write access to Identity Client management
  flows:
  - clientCredentials
  sources:
  - https://docs.fenergox.com/developer-hub/api-and-system-security/api-scopes-and-access-control
- scope: fenx.identity.secretmanagement.read
  name: Fen-X Identity Secret management API Read
  description: Gives read access to Identity Secret management
  flows:
  - clientCredentials
  sources:
  - https://docs.fenergox.com/developer-hub/api-and-system-security/api-scopes-and-access-control
- scope: fenx.identity.secretmanagement.write
  name: Fen-X Identity Secret management API Write
  description: Gives write access to Identity Secret management
  flows:
  - clientCredentials
  sources:
  - https://docs.fenergox.com/developer-hub/api-and-system-security/api-scopes-and-access-control
- scope: fenx.impactassessment.read
  name: Fen-X Impact Assessment API Read
  description: Gives read access to Impact Assessment
  flows:
  - clientCredentials
  sources:
  - https://docs.fenergox.com/developer-hub/api-and-system-security/api-scopes-and-access-control
- scope: fenx.impactassessment.write
  name: Fen-X Impact Assessment API Write
  description: Gives write access to Impact Assessment
  flows:
  - clientCredentials
  sources:
  - https://docs.fenergox.com/developer-hub/api-and-system-security/api-scopes-and-access-control
- scope: fenx.integrations
  name: Fen-X Integrations API
  description: Gives full management access to Integrations (Studio, config, libraries). Superseded by fenx.all
  flows:
  - clientCredentials
  sources:
  - https://docs.fenergox.com/developer-hub/api-and-system-security/api-scopes-and-access-control
- scope: fenx.integrations.execution
  name: Fen-X Integrations Execution API
  description: Gives restricted access to trigger and monitor flow executions only, without configuration management.
    Superseded by fenx.all
  flows:
  - clientCredentials
  sources:
  - https://docs.fenergox.com/developer-hub/api-and-system-security/api-scopes-and-access-control
- scope: fenx.isda.read
  name: Fen-X ISDA API Read
  description: Gives read access to ISDA
  flows:
  - clientCredentials
  sources:
  - https://docs.fenergox.com/developer-hub/api-and-system-security/api-scopes-and-access-control
- scope: fenx.isda.write
  name: Fen-X ISDA API Write
  description: Gives write access to ISDA
  flows:
  - clientCredentials
  sources:
  - https://docs.fenergox.com/developer-hub/api-and-system-security/api-scopes-and-access-control
- scope: fenx.journey.read
  name: Fen-X Journey API Read
  description: Gives read access to Journey
  flows:
  - clientCredentials
  sources:
  - https://docs.fenergox.com/developer-hub/api-and-system-security/api-scopes-and-access-control
- scope: fenx.journey.write
  name: Fen-X Journey API Write
  description: Gives write access to Journey
  flows:
  - clientCredentials
  sources:
  - https://docs.fenergox.com/developer-hub/api-and-system-security/api-scopes-and-access-control
- scope: fenx.localisation.read
  name: Fen-X Localisation API Read
  description: Gives read access to Localisation
  flows:
  - clientCredentials
  sources:
  - https://docs.fenergox.com/developer-hub/api-and-system-security/api-scopes-and-access-control
- scope: fenx.localisation.write
  name: Fen-X Localisation API Write
  description: Gives write access to Localisation
  flows:
  - clientCredentials
  sources:
  - https://docs.fenergox.com/developer-hub/api-and-system-security/api-scopes-and-access-control
- scope: fenx.loggingcentre
  name: Fen-X Logging Centre API
  description: Gives full access to Logging Centre
  flows:
  - clientCredentials
  sources:
  - https://docs.fenergox.com/developer-hub/api-and-system-security/api-scopes-and-access-control
- scope: fenx.lookup.read
  name: Fen-X Lookup API Read
  description: Gives read access to Lookup
  flows:
  - clientCredentials
  sources:
  - https://docs.fenergox.com/developer-hub/api-and-system-security/api-scopes-and-access-control
- scope: fenx.lookup.write
  name: Fen-X Lookup API Write
  description: Gives write access to Lookup
  flows:
  - clientCredentials
  sources:
  - https://docs.fenergox.com/developer-hub/api-and-system-security/api-scopes-and-access-control
- scope: fenx.narrative.read
  name: Fen-X Narrative API Read
  description: Gives read access to Narrative
  flows:
  - clientCredentials
  sources:
  - https://docs.fenergox.com/developer-hub/api-and-system-security/api-scopes-and-access-control
- scope: fenx.narrative.write
  name: Fen-X Narrative API Write
  description: Gives write access to Narrative
  flows:
  - clientCredentials
  sources:
  - https://docs.fenergox.com/developer-hub/api-and-system-security/api-scopes-and-access-control
- scope: fenx.outreach.read
  name: Fen-X Outreach API Read
  description: Gives read access to Outreach
  flows:
  - clientCredentials
  sources:
  - https://docs.fenergox.com/developer-hub/api-and-system-security/api-scopes-and-access-control
- scope: fenx.outreach.write
  name: Fen-X Outreach API Write
  description: Gives writes access to Outreach
  flows:
  - clientCredentials
  sources:
  - https://docs.fenergox.com/developer-hub/api-and-system-security/api-scopes-and-access-control
- scope: fenx.policy.read
  name: Fen-X Policy API Read
  description: Gives read access to Policy
  flows:
  - clientCredentials
  sources:
  - https://docs.fenergox.com/developer-hub/api-and-system-security/api-scopes-and-access-control
- scope: fenx.policy.write
  name: Fen-X Policy API Write
  description: Gives write access to Policy
  flows:
  - clientCredentials
  sources:
  - https://docs.fenergox.com/developer-hub/api-and-system-security/api-scopes-and-access-control
- scope: fenx.policyagent
  name: Fen-X Policy Agent API
  description: Gives full access to Policy Agent
  flows:
  - clientCredentials
  sources:
  - https://docs.fenergox.com/developer-hub/api-and-system-security/api-scopes-and-access-control
- scope: fenx.policyexternaladapter.read
  name: Fen-X Policy External Adapter API Read
  description: Gives read access to Policy External Adapter
  flows:
  - clientCredentials
  sources:
  - https://docs.fenergox.com/developer-hub/api-and-system-security/api-scopes-and-access-control
- scope: fenx.policyexternaladapter.write
  name: Fen-X Policy External Adapter API Write
  description: Gives write access to Policy External Adapter
  flows:
  - clientCredentials
  sources:
  - https://docs.fenergox.com/developer-hub/api-and-system-security/api-scopes-and-access-control
- scope: fenx.portal-tenant.read
  name: Fen-X Portal Tenant API Write
  description: Gives read access to Portal Tenant
  flows:
  - clientCredentials
  sources:
  - https://docs.fenergox.com/developer-hub/api-and-system-security/api-scopes-and-access-control
- scope: fenx.portal-tenant.write
  name: Fen-X Portal Tenant API Read
  description: Gives write access to Portal Tenant
  flows:
  - clientCredentials
  sources:
  - https://docs.fenergox.com/developer-hub/api-and-system-security/api-scopes-and-access-control
- scope: fenx.product.read
  name: Fen-X Product API Read
  description: Gives read access to Product
  flows:
  - clientCredentials
  sources:
  - https://docs.fenergox.com/developer-hub/api-and-system-security/api-scopes-and-access-control
- scope: fenx.product.write
  name: Fen-X Product API Write
  description: Gives write access to Product
  flows:
  - clientCredentials
  sources:
  - https://docs.fenergox.com/developer-hub/api-and-system-security/api-scopes-and-access-control
- scope: fenx.productpolicy.read
  name: Fen-X ProductPolicy API Read
  description: Gives read access to ProductPolicy
  flows:
  - clientCredentials
  sources:
  - https://docs.fenergox.com/developer-hub/api-and-system-security/api-scopes-and-access-control
- scope: fenx.productpolicy.write
  name: Fen-X ProductPolicy API Write
  description: Gives write access to ProductPolicy
  flows:
  - clientCredentials
  sources:
  - https://docs.fenergox.com/developer-hub/api-and-system-security/api-scopes-and-access-control
- scope: fenx.reporting.read
  name: Fen-X Reporting API Read
  description: Gives read access to Reporting
  flows:
  - clientCredentials
  sources:
  - https://docs.fenergox.com/developer-hub/api-and-system-security/api-scopes-and-access-control
- scope: fenx.reports.read
  name: Fen-X Advanced Reporting API Read
  description: Gives read access to Advanced Reporting
  flows:
  - clientCredentials
  sources:
  - https://docs.fenergox.com/developer-hub/api-and-system-security/api-scopes-and-access-control
- scope: fenx.reports.write
  name: Fen-X Advanced Reporting API Write
  description: Gives writes access to Advanced Reporting
  flows:
  - clientCredentials
  sources:
  - https://docs.fenergox.com/developer-hub/api-and-system-security/api-scopes-and-access-control
- scope: fenx.review.read
  name: Fen-X Review API Read
  description: Gives read access to Review
  flows:
  - clientCredentials
  sources:
  - https://docs.fenergox.com/developer-hub/api-and-system-security/api-scopes-and-access-control
- scope: fenx.review.write
  name: Fen-X Review API Write
  description: Gives writes access to Review
  flows:
  - clientCredentials
  sources:
  - https://docs.fenergox.com/developer-hub/api-and-system-security/api-scopes-and-access-control
- scope: fenx.risk.read
  name: Fen-X Risk API Read
  description: Gives read access to Risk models and perform calculations
  flows:
  - clientCredentials
  sources:
  - https://docs.fenergox.com/developer-hub/api-and-system-security/api-scopes-and-access-control
- scope: fenx.risk.write
  name: Fen-X Risk API Write
  description: Gives writes access to Risk models
  flows:
  - clientCredentials
  sources:
  - https://docs.fenergox.com/developer-hub/api-and-system-security/api-scopes-and-access-control
- scope: fenx.screening.read
  name: Fen-X Screening API Read
  description: Gives read access to Screening
  flows:
  - clientCredentials
  sources:
  - https://docs.fenergox.com/developer-hub/api-and-system-security/api-scopes-and-access-control
- scope: fenx.screening.write
  name: Fen-X Screening API Write
  description: Gives write access to Screening
  flows:
  - clientCredentials
  sources:
  - https://docs.fenergox.com/developer-hub/api-and-system-security/api-scopes-and-access-control
- scope: fenx.shareddatatemplate.read
  name: Fen-X Shared Data Template API Read
  description: Gives read access to Shared Data Template
  flows:
  - clientCredentials
  sources:
  - https://docs.fenergox.com/developer-hub/api-and-system-security/api-scopes-and-access-control
- scope: fenx.shareddatatemplate.write
  name: Fen-X Shared Data Template API Write
  description: Gives write access to Shared Data Template
  flows:
  - clientCredentials
  sources:
  - https://docs.fenergox.com/developer-hub/api-and-system-security/api-scopes-and-access-control
- scope: fenx.significance.rule.access
  name: Fen-X Significance Rule Access
  description: Gives Significance Rule Access
  flows:
  - clientCredentials
  sources:
  - https://docs.fenergox.com/developer-hub/api-and-system-security/api-scopes-and-access-control
- scope: fenx.smartdocs.read
  name: Fen-X Smartdocs API Read
  description: Gives read access to IDP models
  flows:
  - clientCredentials
  sources:
  - https://docs.fenergox.com/developer-hub/api-and-system-security/api-scopes-and-access-control
- scope: fenx.smartdocs.write
  name: Fen-X Smartdocs API Write
  description: Gives write access to IDP models
  flows:
  - clientCredentials
  sources:
  - https://docs.fenergox.com/developer-hub/api-and-system-security/api-scopes-and-access-control
- scope: fenx.tenant.read
  name: Fen-X Tenant API Read
  description: Gives read access to Tenant
  flows:
  - clientCredentials
  sources:
  - https://docs.fenergox.com/developer-hub/api-and-system-security/api-scopes-and-access-control
- scope: fenx.tenant.write
  name: Fen-X Tenant API Write
  description: Gives write access to Tenant
  flows:
  - clientCredentials
  sources:
  - https://docs.fenergox.com/developer-hub/api-and-system-security/api-scopes-and-access-control
- scope: fenx.transferagency.read
  name: Fen-X TransferAgency API Read
  description: Gives read access to Transfer Agency
  flows:
  - clientCredentials
  sources:
  - https://docs.fenergox.com/developer-hub/api-and-system-security/api-scopes-and-access-control
- scope: fenx.transferagency.write
  name: Fen-X TransferAgency API Write
  description: Gives write access to Transfer Agency
  flows:
  - clientCredentials
  sources:
  - https://docs.fenergox.com/developer-hub/api-and-system-security/api-scopes-and-access-control
- scope: fenx.webhooks
  name: Webhooks management API
  description: Allows full access to Webhooks Management API
  flows:
  - clientCredentials
  sources:
  - https://docs.fenergox.com/developer-hub/api-and-system-security/api-scopes-and-access-control
- scope: fenx.all
  name: Fen-X All APIs
  description: Gives full access to all Fen-X APIs
  flows:
  - clientCredentials
  sources:
  - https://docs.fenergox.com/developer-hub/api-and-system-security/api-scopes-and-access-control
discovery_only_scopes:
- Fenergo.Nebula
- address
- email
- fenergo-nebula-admin_api
- fenx.fake
- fenx.identityapi
- fenx.internal
- fenx.portal-tenant.read.private
- identityapi.externaluser.write
- identityapi.scimuser.create
- identityapi.scimuser.delete
- identityapi.scimuser.read
- identityapi.scimuser.update
- offline_access
- openid
- profile
- refresh_token
- roles
- scimapi.resource.add
- scimapi.resource.bulk
- scimapi.resource.delete
- scimapi.resource.query
- scimapi.resource.update
- selected-tenant
- tenant
scim_scopes:
- scope: scimapi.resource.query
  description: Required for SCIM GET operations
- scope: scimapi.resource.add
  description: Required for SCIM POST operations
- scope: scimapi.resource.update
  description: Required for SCIM PUT and PATCH operations
- scope: scimapi.resource.delete
  description: Required for SCIM DELETE operations
- scope: scimapi.resource.bulk
  description: Required for SCIM Bulk requests (does not imply add/update/delete)
scim_scopes_source: https://docs.fenergox.com/developer-hub/api-and-system-security/scim-overview
spec_declared_scopes:
- scope: export_all
  description: all exports operations
  sources:
  - openapi/fenergo-tm-dataexport-api-spec-openapi.json