Connected App Permission Patterns

Scopes

A static permission scope readback shows Read calendar events, Create calendar holds, and Limited workspace.

Program

Permission scope lists should make granted access understandable without authorizing, revoking, syncing, or calling an integration service.

permission_scope_readback.html
Visuals: captured from real browser rendering
<section class="scope-readback" aria-labelledby="scope-title">
  <h2 id="scope-title">Permission scopes</h2>
  <ul aria-label="Connected app scopes">
    <li><strong>Scope</strong> Read calendar events</li>
    <li><strong>Scope</strong> Create calendar holds</li>
  </ul>
  <p class="access"><strong>Access level</strong> <span class="badge">Limited workspace</span></p>
  <p class="note">Static scope readback only; no route, save, connect, disconnect, authorize, revoke, change permissions, or call integrations runs.</p>
</section>
<style>
  .scope-readback { display: grid; gap: 10px; max-width: 38rem; border: 1px solid #64748b; padding: 12px; }
  .scope-readback ul { display: grid; gap: 8px; margin: 0; padding-left: 1.25rem; }
  .scope-readback li { padding: 6px 8px; border: 1px solid #cbd5e1; }
  .access { border: 1px solid #60a5fa; background: #eff6ff; padding: 8px; }
  .badge { border-radius: 999px; background: #dbeafe; padding: 2px 8px; }
  .scope-readback p, .note { margin: 0; }
  .note { color: #475569; }
</style>

  1. Label the scope list.

    The section is labelled by its visible heading.
    The section is labelled by its visible heading.

  2. Show the first scope.

    The first scope is exact pinned data.
    The first scope is exact pinned data.

  3. Show the second scope.

    The second scope is exact pinned data.
    The second scope is exact pinned data.

  4. Label the access level.

    The access row names what the badge means.
    The access row names what the badge means.

  5. Show the access-level readback.

    The access level is exact pinned data.
    The access level is exact pinned data.

  6. Check scope honesty.

    Scopes, access level, and no permission service.
    Scopes, access level, and no permission service.
labelled scope list The section heading names the permission scopes surface.
scope rows The two scope rows and access level are exact pinned data.
no permission service The lesson should not imply OAuth flows, tokens, auth APIs, integration APIs, calendar APIs, or permission APIs.