The scopes of the resource.

Table-Specific Information

We recommend using the built-in Client Application Developer role to read and write data for this table.

SELECT

Reading data from this table requires Read Scope/resources:read:scope permission.

The driver uses the PingOne Platform API to process WHERE clause conditions built with the following columns and operators.

• ResourceId supports the following operators: =, IN.
• Id supports the following operators: =, IN.

All other filters are processed client-side within the driver.

For example, the following queries are processed server-side:

SELECT * FROM Administrators.ResourceScopes WHERE ResourceId = '0978e1d6-cdd5-4115-a5e0-90fe93064e40';
SELECT * FROM Administrators.ResourceScopes WHERE ResourceId IN ('0978e1d6-cdd5-4115-a5e0-90fe93064e40', '7b9a9ba5-459a-45df-a6db-cbc3cab0e53d');
SELECT * FROM Administrators.ResourceScopes WHERE ResourceId = '0978e1d6-cdd5-4115-a5e0-90fe93064e40' AND Id = '26212559-ff93-4d9c-a0e1-e3fd8d256e84'

INSERT

Creating data in this table requires Create Scope/resources:create:scope permission.

Refer to the query example below:

INSERT INTO Administrators.ResourceScopes (Name, Description, ResourceId, UserAttributes) VALUES ('p1:update:user:basic', 'Update basic user attributes.', '0978e1d6-cdd5-4115-a5e0-90fe93064e40', 'username,email')

UPDATE

Updating data in this table requires Update Scope/resources:update:scope permission.

Refer to the query example below:

UPDATE Administrators.ResourceScopes SET Description = 'Test' WHERE ResourceId = '0978e1d6-cdd5-4115-a5e0-90fe93064e40' AND Id = '26212559-ff93-4d9c-a0e1-e3fd8d256e84'

DELETE

Deleting data from this table requires Delete Scope/resources:delete:scope permission.

Refer to the query example below:

DELETE FROM Administrators.ResourceScopes WHERE ResourceId = '0978e1d6-cdd5-4115-a5e0-90fe93064e40' AND Id = '246623f8-4ded-440c-a15c-71d7dd955935'

Columns

Name	Type	ReadOnly	References	Description
Id [KEY]	String	True		The scope identifier (UUID).
Name	String	False		The name of the scope.
Description	String	False		The scope's description.
ResourceId	String	False	Resources.Id	The identifier (UUID) of the resource to which the scope belongs.
ResourceName	String	True		The name of the resource to which the scope belongs.
UserAttributes	String	False		The user schema attributes that can be read or updated for the specified PingOne access control scope. This applies only for the 'p1:read:user', 'p1:update:user' and 'p1:read:user:{suffix}' and 'p1:update:user:{suffix}' scopes.
CreatedAt	Datetime	True		The time at which the resource scope was created.
UpdatedAt	Datetime	True		The time at which the resource scope was last updated.