---
title: "Control Access to REST API Operations"
canonical: "https://help.agiloft.com/space/HELP/43714795/Control%20Access%20to%20REST%20API%20Operations"
format: markdown
---
While group permissions control the data an API user can access, the Scope parameter defines which REST API operations the user can perform with an access token. Together, the Scope parameter and group permissions give you granular control over both the data an API user can access and the actions they can perform on that data. You configure the Scope parameter in API Settings.

To set scopes for users:

1. Navigate to **Setup > Integration > Access Token API > Configure**.
2. Click New and create your settings, or edit the existing settings.
3. Open the Advanced configuration section at the bottom of the page.
4. Add your scope, using the format shown in the code block below. The block below shows the scope parameter format, along with an example of an admin user being given access to five different operations through the access token.
5. You can also specify a list of operations that are available for any user by default. These will be applied to anyone using the access token. It is created using the same format as above, just without specifying username.

> ⚠️ A blank Scope parameter gives a user access to each and every operation, so ensure any and all Scope parameters are either filled or blank by intention.

## Available Operations

The following operations are available for designation in the scope parameter. If the parameter is empty or no default list is given, all of these operations are available to the user.

- [EWCreate](https://agiloft-public.atlassian.net/wiki/spaces/HELP/pages/43714571)
- [EWRead](https://agiloft-public.atlassian.net/wiki/spaces/HELP/pages/43714567)
- [EWUpdate](https://agiloft-public.atlassian.net/wiki/spaces/HELP/pages/43714575)
- [EWDelete](https://agiloft-public.atlassian.net/wiki/spaces/HELP/pages/43714569)
- REST
- EWBroadcast
- [EWSelect](https://agiloft-public.atlassian.net/wiki/spaces/HELP/pages/43714549)
- [EWSearch](https://agiloft-public.atlassian.net/wiki/spaces/HELP/pages/43717730)
- [EWGetChoiceLineID](https://agiloft-public.atlassian.net/wiki/spaces/HELP/pages/43714380)
- EWHotlinks
- [EWAttach](https://agiloft-public.atlassian.net/wiki/spaces/HELP/pages/43714376)
- [EWRetrieve](https://agiloft-public.atlassian.net/wiki/spaces/HELP/pages/43714587)
- [EWRemoveAttachment](https://agiloft-public.atlassian.net/wiki/spaces/HELP/pages/43714589)
- EWOData
- [EWTable](https://agiloft-public.atlassian.net/wiki/spaces/HELP/pages/43715609)
- [EWSavedSearch](https://agiloft-public.atlassian.net/wiki/spaces/HELP/pages/43714188)
- [EWAttachInfo](https://agiloft-public.atlassian.net/wiki/spaces/HELP/pages/43714376)
- [webhooks](https://agiloft-public.atlassian.net/wiki/spaces/HELP/pages/43714342)
- [EWActionButton](https://agiloft-public.atlassian.net/wiki/spaces/HELP/pages/43717142)
- [EWAsyncStatus](https://agiloft-public.atlassian.net/wiki/spaces/HELP/pages/43712580)

#### Related articles

> Macro (contentbylabel)