Permission Scopes
Complete list of all permission scopes that add-ons can request.
Request minimal scopes
Only request what you actually use. Users see the permission list during installation — fewer permissions means more trust and more installs.
Dangerous scopes
Scopes marked as "dangerous" (invoices.delete, journal_entries.write, payroll.write) require extra scrutiny during review. Only request these if your addon genuinely needs them.
All Scopes (62)
| Scope | Description |
|---|---|
customers.read | List and view customers |
customers.write | Create and update customers |
customers.delete | Delete customers |
invoices.read | List and view invoices |
invoices.write | Create and update invoices |
invoices.delete | Delete invoices (dangerous) |
products.read | List and view products |
products.write | Create and update products |
products.delete | Delete products |
payments.read | List and view payments |
payments.write | Create payments |
expenses.read | List and view expenses |
expenses.write | Create, update, approve expenses |
vendors.read | List and view vendors |
vendors.write | Create and update vendors |
vendors.delete | Delete vendors |
bills.read | List and view bills |
bills.write | Create, update, approve bills |
estimates.read | List and view estimates/quotes |
estimates.write | Create, accept, decline estimates |
credit_notes.read | List and view credit notes |
credit_notes.write | Create and update credit notes |
employees.read | List employees (name, email, role) |
payroll.read | View payroll runs |
payroll.write | Create and process payroll (dangerous) |
accounts.read | View chart of accounts and GL |
reports.read | Access financial reports |
inventory.read | View stock levels |
inventory.write | Update stock quantities |
projects.read | List and view projects, tasks, time |
projects.write | Create/update projects and tasks |
purchase_orders.read | View purchase orders |
purchase_orders.write | Create and approve POs |
budgets.read | View budgets |
budgets.write | Create and update budgets |
assets.read | View fixed assets |
assets.write | Create, update, depreciate assets |
bank_transactions.read | View bank transactions |
bank_transactions.write | Create, categorize, reconcile |
journal_entries.read | View journal entries |
journal_entries.write | Create, post, void entries (dangerous) |
crm.read | View leads, opportunities, contacts |
crm.write | Create leads and opportunities |
helpdesk.read | View support tickets |
helpdesk.write | Create tickets and replies |
subscriptions.read | View subscription plans and subscribers |
subscriptions.write | Subscribe and cancel |
fleet.read | View vehicles, fuel, maintenance, trips |
fleet.write | Create fuel logs, maintenance, trips |
ecommerce.read | View store orders, config, coupons |
ecommerce.write | Update order status, create coupons |
rental.read | View rental assets and contracts |
rental.write | Create rental contracts |
repairs.read | View repair jobs |
repairs.write | Create jobs, update status |
field_service.read | View field service jobs |
field_service.write | Create jobs, update status |
fuel_station.read | View pumps, tanks, shifts, sales |
fuel_station.write | Create dip readings, deliveries, sales |
production.read | View BOMs and work orders |
pos.read | View POS sales |
tax.read | View tax rates |
Wildcard Scopes
customers.*— all customer operations (read + write + delete)*— full access to everything (rarely granted)