Skip to main content
A token’s effective permissions are its granted scopes intersected with the ceiling of the role it acts under. Asking for a scope your role can’t hold is rejected at creation time rather than silently dropped.

Scopes

Role ceilings