/
Documentation

Permission Scopes

Complete list of all permission scopes that add-ons can request.

Request minimal scopes

Only request what you actually use. Users see the permission list during installation — fewer permissions means more trust and more installs.

Dangerous scopes

Scopes marked as "dangerous" (invoices.delete, journal_entries.write, payroll.write) require extra scrutiny during review. Only request these if your addon genuinely needs them.

All Scopes (62)

ScopeDescription
customers.readList and view customers
customers.writeCreate and update customers
customers.deleteDelete customers
invoices.readList and view invoices
invoices.writeCreate and update invoices
invoices.deleteDelete invoices (dangerous)
products.readList and view products
products.writeCreate and update products
products.deleteDelete products
payments.readList and view payments
payments.writeCreate payments
expenses.readList and view expenses
expenses.writeCreate, update, approve expenses
vendors.readList and view vendors
vendors.writeCreate and update vendors
vendors.deleteDelete vendors
bills.readList and view bills
bills.writeCreate, update, approve bills
estimates.readList and view estimates/quotes
estimates.writeCreate, accept, decline estimates
credit_notes.readList and view credit notes
credit_notes.writeCreate and update credit notes
employees.readList employees (name, email, role)
payroll.readView payroll runs
payroll.writeCreate and process payroll (dangerous)
accounts.readView chart of accounts and GL
reports.readAccess financial reports
inventory.readView stock levels
inventory.writeUpdate stock quantities
projects.readList and view projects, tasks, time
projects.writeCreate/update projects and tasks
purchase_orders.readView purchase orders
purchase_orders.writeCreate and approve POs
budgets.readView budgets
budgets.writeCreate and update budgets
assets.readView fixed assets
assets.writeCreate, update, depreciate assets
bank_transactions.readView bank transactions
bank_transactions.writeCreate, categorize, reconcile
journal_entries.readView journal entries
journal_entries.writeCreate, post, void entries (dangerous)
crm.readView leads, opportunities, contacts
crm.writeCreate leads and opportunities
helpdesk.readView support tickets
helpdesk.writeCreate tickets and replies
subscriptions.readView subscription plans and subscribers
subscriptions.writeSubscribe and cancel
fleet.readView vehicles, fuel, maintenance, trips
fleet.writeCreate fuel logs, maintenance, trips
ecommerce.readView store orders, config, coupons
ecommerce.writeUpdate order status, create coupons
rental.readView rental assets and contracts
rental.writeCreate rental contracts
repairs.readView repair jobs
repairs.writeCreate jobs, update status
field_service.readView field service jobs
field_service.writeCreate jobs, update status
fuel_station.readView pumps, tanks, shifts, sales
fuel_station.writeCreate dip readings, deliveries, sales
production.readView BOMs and work orders
pos.readView POS sales
tax.readView tax rates

Wildcard Scopes

  • customers.* — all customer operations (read + write + delete)
  • * — full access to everything (rarely granted)