Atlassian Connect app scopes
When you install an Atlassian Connect app (also known as an add-on or plugin), you're prompted to approve and accept the scopes of the app. This page explains what scopes are, and the breadth of scopes an app might have.
What are scopes?
Scopes are essentially app capabilities – things apps can do to interact with your product instance. An app might need permission to read, write, or delete data in order to integrate with your product instance.
Atlassian Connect apps are hosted remotely, outside your product instance, so they need explicit permission to integrate with your product.
Possible scopes
The following table includes all possible scopes.
Host application | Scope | Capabilities |
---|---|---|
JIRA Cloud & Confluence Cloud | Read | Read data from the host application |
Write | Write data to the host application | |
Delete | Delete data from the host application | |
Project administration | Administer JIRA projects | |
Space administration | Administer Confluence spaces | |
Act as user | Act on a user's behalf, even when the user is offline | |
Full Administration | Administer the host application | |
Access Email Addresses | Access email addresses for all users in the system. | |
Bitbucket Cloud | Repository | Read access to all the repositories the authorizing user has access to |
Edit Repository | Write (not admin) access to all the repositories the authorizing user has access to | |
Administer Repository | Administrator access to all the repositories the authorizing user has access to | |
Snippet | Read access to all the snippets the authorizing user has access to | |
Edit Snippet | Write access to all the snippets the authorizing user can edit | |
Issue | Ability to interact with issue trackers the way non-repo members can | |
Manage Issue | Ability to view, create, comment, watch, transition and delete issues | |
Wiki | Access to Wikis | |
Pull Request | Read access to pull requests and collaborate on them | |
Edit Pull Request | Access to pull requests, and ability to create, merge and decline them | |
Ability to see the user's primary email address | ||
Account | Ability to see all the user's account information | |
Manage Account | Ability to change properties on the user's account | |
Team | Ability to find out what teams the current user is part of | |
Manage Team | Ability to manage the teams that the authorizing user is an admin on | |
Webhook | Access to webhooks | |
Project | Access to projects | |
Edit Project | Ability to change properties on a project |