Class SystemTeamScopes
System-level (cross-team) scope constants for team operations. Unlike the in-team TeamScopes
(which authorize only the caller's own team), these authorize across any team and are granted to system
API keys or privileged roles. The toolkit defines them; the consumer applies them as they see fit
(e.g. o.ConfigureSystemRoles mapping a role to the scope, or a system API key's scope list).
public static class SystemTeamScopes
- Inheritance
-
SystemTeamScopes
- Inherited Members
Fields
Delete
Authorizes deleting any team, regardless of membership and regardless of the
AllowTeamCreation self-service option. The unconditional, cross-team delete path.
public const string Delete = "teams:delete"
Field Value
Read
Authorizes enumerating any team via ITeamService.GetAllTeamsAsync, regardless of
membership — the discovery path for oversight roles (support, administration).
public const string Read = "teams:read"
Field Value
Remarks
Discovery only. Holding this grants no access inside a team: selecting a team the caller is not a member of still yields only the scopes that team has consented to, and none if it has consented to nothing. Contrast with the in-team Read, which authorizes reading the caller's own team.