# API scopes

> Look up the OAuth scopes you can add to an API token and the public REST API endpoints each scope allows.

Look up the OAuth scopes you can add to an API token and the public REST API endpoints each scope allows.

## Overview

When you create an API token, the scopes you select decide which REST API endpoints that token can call. Each scope covers one resource, and it is either read-only or read and write.

Add only the scopes your integration needs so the token cannot reach unrelated company data. Many scopes include sensitive data, so treat each one as a deliberate choice.

The token is also limited by the permission profile of the person who created it. [API Tokens and Permissions](https://developer.rippling.com/documentation/rest-api/essentials/api-tokens) explains how tokens and permission profiles work together.

## Scopes

| Scope | Description | API endpoints |
| --- | --- | --- |
| `activity-log.read` | Read visible Activity Log events available to the authorized client | -   [GET List visible activity log events retained from the last 90 days](https://developer.rippling.com/documentation/rest-api/reference/list-activity-log)<br>-   [GET Retrieve a specific activity log event](https://developer.rippling.com/documentation/rest-api/reference/get-activity-log) |
| `app-users.read` | Read app users data available to the authorized client | -   [GET List app users](https://developer.rippling.com/documentation/rest-api/reference/list-app-users)<br>-   [GET Retrieve a specific app user](https://developer.rippling.com/documentation/rest-api/reference/get-app-users) |
| `break-policies.read` | Read break policies data available to the authorized client | -   [GET List break policies](https://developer.rippling.com/documentation/rest-api/reference/list-break-policies)<br>-   [GET Retrieve a specific break policy](https://developer.rippling.com/documentation/rest-api/reference/get-break-policies) |
| `break-types.read` | Read break types data available to the authorized client | -   [GET List break types](https://developer.rippling.com/documentation/rest-api/reference/list-break-types)<br>-   [GET Retrieve a specific break type](https://developer.rippling.com/documentation/rest-api/reference/get-break-types) |
| `business-partner-groups.read` | Read business partner groups data available to the authorized client | -   [GET List business partner groups](https://developer.rippling.com/documentation/rest-api/reference/list-business-partner-groups)<br>-   [GET Retrieve a specific business partner group](https://developer.rippling.com/documentation/rest-api/reference/get-business-partner-groups) |
| `business-partner-groups.read-write` | Read and write business partner groups data available to the authorized client | -   [POST Create a new business partner group](https://developer.rippling.com/documentation/rest-api/reference/create-business-partner-groups)<br>-   [DELETE Delete a business partner group](https://developer.rippling.com/documentation/rest-api/reference/delete-business-partner-groups) |
| `business-partners.read` | Read business partners data available to the authorized client | -   [GET List business partners](https://developer.rippling.com/documentation/rest-api/reference/list-business-partners)<br>-   [GET Retrieve a specific business partner](https://developer.rippling.com/documentation/rest-api/reference/get-business-partners) |
| `business-partners.read-write` | Read and write business partners data available to the authorized client | -   [POST Create a new business partner](https://developer.rippling.com/documentation/rest-api/reference/create-business-partners)<br>-   [DELETE Delete a business partner](https://developer.rippling.com/documentation/rest-api/reference/delete-business-partners) |
| `business-structure-paths.read` | Read business-structure-paths data available to the authorized client | -   [GET List business-structure-paths](https://developer.rippling.com/documentation/rest-api/reference/list-business-structure-paths)<br>-   [GET Retrieve a specific business-structure-path](https://developer.rippling.com/documentation/rest-api/reference/get-business-structure-paths) |
| `business-structure-paths.read-write` | Read and write business-structure-paths data available to the authorized client | -   [POST Create a new business-structure-path](https://developer.rippling.com/documentation/rest-api/reference/create-business-structure-paths)<br>-   [DELETE Delete a business-structure-path](https://developer.rippling.com/documentation/rest-api/reference/delete-business-structure-paths) |
| `candidate-applications.read` | Read candidate applications data available to the authorized client | -   [GET List candidate applications](https://developer.rippling.com/documentation/rest-api/reference/list-candidate-applications) |
| `candidates.read` | Read candidates data available to the authorized client | -   [GET List candidates](https://developer.rippling.com/documentation/rest-api/reference/list-candidates) |
| `companies.read` | Read companies data available to the authorized client | -   [GET List companies](https://developer.rippling.com/documentation/rest-api/reference/list-companies) |
| `company-legal-entities.read` | Read company legal entities data available to the authorized client | -   [GET List company legal entities](https://developer.rippling.com/documentation/rest-api/reference/list-company-legal-entities)<br>-   [GET Retrieve a specific company legal entity](https://developer.rippling.com/documentation/rest-api/reference/get-company-legal-entities) |
| `company-legal-entity-workers.read` | Read company-legal-entity-workers data available to the authorized client | -   [GET List company-legal-entity-workers](https://developer.rippling.com/documentation/rest-api/reference/list-company-legal-entity-workers)<br>-   [GET Retrieve a specific company-legal-entity-worker](https://developer.rippling.com/documentation/rest-api/reference/get-company-legal-entity-workers) |
| `compensation-bands-details.read` | Read compensation bands details data available to the authorized client | -   [GET List compensation bands details](https://developer.rippling.com/documentation/rest-api/reference/list-compensation-bands-details)<br>-   [GET Retrieve a specific compensation bands detail](https://developer.rippling.com/documentation/rest-api/reference/get-compensation-bands-details) |
| `compensations.read` | Read compensations data available to the authorized client | -   [GET List compensations](https://developer.rippling.com/documentation/rest-api/reference/list-compensations)<br>-   [GET Retrieve a specific compensation](https://developer.rippling.com/documentation/rest-api/reference/get-compensations) |
| `custom-fields.read` | Read custom fields data available to the authorized client | -   [GET List custom fields](https://developer.rippling.com/documentation/rest-api/reference/list-custom-fields) |
| `custom-object-records.read` | Read Custom Object record data available to the authorized client | -   [GET List custom object records](https://developer.rippling.com/documentation/rest-api/reference/list-custom-objects-custom-object-api-name-records)<br>-   [POST List custom object records by query](https://developer.rippling.com/documentation/rest-api/reference/list-by-query-custom-objects-custom-object-api-name-records)<br>-   [GET Retrieve a specific custom object record](https://developer.rippling.com/documentation/rest-api/reference/get-custom-objects-custom-object-api-name-records)<br>-   [GET Retrieve a specific custom object record by its external\_id](https://developer.rippling.com/documentation/rest-api/reference/get-custom-objects-custom-object-api-name-records-by-external-id) |
| `custom-object-records.read-write` | Read and write Custom Object record data available to the authorized client | -   [GET List custom object records](https://developer.rippling.com/documentation/rest-api/reference/list-custom-objects-custom-object-api-name-records)<br>-   [POST Create or update a custom object record](https://developer.rippling.com/documentation/rest-api/reference/create-custom-objects-custom-object-api-name-records)<br>-   [POST List custom object records by query](https://developer.rippling.com/documentation/rest-api/reference/list-by-query-custom-objects-custom-object-api-name-records)<br>-   [GET Retrieve a specific custom object record](https://developer.rippling.com/documentation/rest-api/reference/get-custom-objects-custom-object-api-name-records)<br>-   [PATCH Update a custom object record](https://developer.rippling.com/documentation/rest-api/reference/update-custom-objects-custom-object-api-name-records)<br>-   [DELETE Delete a custom object record](https://developer.rippling.com/documentation/rest-api/reference/delete-custom-objects-custom-object-api-name-records)<br>-   [GET Retrieve a specific custom object record by its external\_id](https://developer.rippling.com/documentation/rest-api/reference/get-custom-objects-custom-object-api-name-records-by-external-id)<br>-   [POST Bulk create or update custom object records](https://developer.rippling.com/documentation/rest-api/reference/bulk-create-custom-objects-custom-object-api-name-records)<br>-   [PATCH Bulk Update custom object records](https://developer.rippling.com/documentation/rest-api/reference/bulk-update-custom-objects-custom-object-api-name-records)<br>-   [POST Bulk delete custom object records](https://developer.rippling.com/documentation/rest-api/reference/bulk-delete-custom-objects-custom-object-api-name-records) |
| `custom-object.read-write.owner` |  | -   [POST Bulk create or update custom object records](https://developer.rippling.com/documentation/rest-api/reference/bulk-create-custom-objects-custom-object-api-name-records) |
| `custom-objects.read` | Read custom-objects data available to the authorized client | -   [GET List custom objects](https://developer.rippling.com/documentation/rest-api/reference/list-custom-objects)<br>-   [GET Retrieve a specific custom object](https://developer.rippling.com/documentation/rest-api/reference/get-custom-objects)<br>-   [GET List object categories](https://developer.rippling.com/documentation/rest-api/reference/list-object-categories)<br>-   [GET Retrieve a specific object category](https://developer.rippling.com/documentation/rest-api/reference/get-object-categories)<br>-   [GET List custom object fields](https://developer.rippling.com/documentation/rest-api/reference/list-custom-objects-custom-object-api-name-fields)<br>-   [GET Retrieve a specific custom object field](https://developer.rippling.com/documentation/rest-api/reference/get-custom-objects-custom-object-api-name-fields) |
| `custom-objects.read-write` | Read and write custom-objects data available to the authorized client | -   [GET List custom objects](https://developer.rippling.com/documentation/rest-api/reference/list-custom-objects)<br>-   [GET Retrieve a specific custom object](https://developer.rippling.com/documentation/rest-api/reference/get-custom-objects)<br>-   [PATCH Update a custom object](https://developer.rippling.com/documentation/rest-api/reference/update-custom-objects)<br>-   [DELETE Delete a custom object](https://developer.rippling.com/documentation/rest-api/reference/delete-custom-objects)<br>-   [GET List object categories](https://developer.rippling.com/documentation/rest-api/reference/list-object-categories)<br>-   [GET Retrieve a specific object category](https://developer.rippling.com/documentation/rest-api/reference/get-object-categories)<br>-   [PATCH Update an object category](https://developer.rippling.com/documentation/rest-api/reference/update-object-categories)<br>-   [DELETE Delete an object category](https://developer.rippling.com/documentation/rest-api/reference/delete-object-categories)<br>-   [GET List custom object fields](https://developer.rippling.com/documentation/rest-api/reference/list-custom-objects-custom-object-api-name-fields)<br>-   [POST Create a new custom object field](https://developer.rippling.com/documentation/rest-api/reference/create-custom-objects-custom-object-api-name-fields)<br>-   [GET Retrieve a specific custom object field](https://developer.rippling.com/documentation/rest-api/reference/get-custom-objects-custom-object-api-name-fields)<br>-   [PATCH Update a custom object field](https://developer.rippling.com/documentation/rest-api/reference/update-custom-objects-custom-object-api-name-fields)<br>-   [DELETE Delete a custom object field](https://developer.rippling.com/documentation/rest-api/reference/delete-custom-objects-custom-object-api-name-fields) |
| `custom-objects.read-write.owner` | Create new custom-objects, read and write custom-objects data owned by the authorized client | -   [GET List custom objects](https://developer.rippling.com/documentation/rest-api/reference/list-custom-objects)<br>-   [POST Create a new custom object](https://developer.rippling.com/documentation/rest-api/reference/create-custom-objects)<br>-   [GET Retrieve a specific custom object](https://developer.rippling.com/documentation/rest-api/reference/get-custom-objects)<br>-   [PATCH Update a custom object](https://developer.rippling.com/documentation/rest-api/reference/update-custom-objects)<br>-   [DELETE Delete a custom object](https://developer.rippling.com/documentation/rest-api/reference/delete-custom-objects)<br>-   [GET List object categories](https://developer.rippling.com/documentation/rest-api/reference/list-object-categories)<br>-   [POST Create a new object category](https://developer.rippling.com/documentation/rest-api/reference/create-object-categories)<br>-   [GET Retrieve a specific object category](https://developer.rippling.com/documentation/rest-api/reference/get-object-categories)<br>-   [PATCH Update an object category](https://developer.rippling.com/documentation/rest-api/reference/update-object-categories)<br>-   [DELETE Delete an object category](https://developer.rippling.com/documentation/rest-api/reference/delete-object-categories)<br>-   [GET List custom object fields](https://developer.rippling.com/documentation/rest-api/reference/list-custom-objects-custom-object-api-name-fields)<br>-   [POST Create a new custom object field](https://developer.rippling.com/documentation/rest-api/reference/create-custom-objects-custom-object-api-name-fields)<br>-   [GET Retrieve a specific custom object field](https://developer.rippling.com/documentation/rest-api/reference/get-custom-objects-custom-object-api-name-fields)<br>-   [PATCH Update a custom object field](https://developer.rippling.com/documentation/rest-api/reference/update-custom-objects-custom-object-api-name-fields)<br>-   [DELETE Delete a custom object field](https://developer.rippling.com/documentation/rest-api/reference/delete-custom-objects-custom-object-api-name-fields)<br>-   [GET List custom object records](https://developer.rippling.com/documentation/rest-api/reference/list-custom-objects-custom-object-api-name-records)<br>-   [POST Create or update a custom object record](https://developer.rippling.com/documentation/rest-api/reference/create-custom-objects-custom-object-api-name-records)<br>-   [POST List custom object records by query](https://developer.rippling.com/documentation/rest-api/reference/list-by-query-custom-objects-custom-object-api-name-records)<br>-   [GET Retrieve a specific custom object record](https://developer.rippling.com/documentation/rest-api/reference/get-custom-objects-custom-object-api-name-records)<br>-   [PATCH Update a custom object record](https://developer.rippling.com/documentation/rest-api/reference/update-custom-objects-custom-object-api-name-records)<br>-   [DELETE Delete a custom object record](https://developer.rippling.com/documentation/rest-api/reference/delete-custom-objects-custom-object-api-name-records)<br>-   [GET Retrieve a specific custom object record by its external\_id](https://developer.rippling.com/documentation/rest-api/reference/get-custom-objects-custom-object-api-name-records-by-external-id)<br>-   [PATCH Bulk Update custom object records](https://developer.rippling.com/documentation/rest-api/reference/bulk-update-custom-objects-custom-object-api-name-records)<br>-   [POST Bulk delete custom object records](https://developer.rippling.com/documentation/rest-api/reference/bulk-delete-custom-objects-custom-object-api-name-records) |
| `custom-settings.read` | Read Custom-settings data available to the authorized client | -   [GET List Setting](https://developer.rippling.com/documentation/rest-api/reference/list-custom-settings)<br>-   [GET Retrieve a specific Setting](https://developer.rippling.com/documentation/rest-api/reference/get-custom-settings) |
| `custom-settings.read-write` | Read and write Custom-settings data available to the authorized client | -   [POST Create a new Setting](https://developer.rippling.com/documentation/rest-api/reference/create-custom-settings)<br>-   [PATCH Update a Setting](https://developer.rippling.com/documentation/rest-api/reference/update-custom-settings)<br>-   [DELETE Delete a Setting](https://developer.rippling.com/documentation/rest-api/reference/delete-custom-settings) |
| `departments.read` | Read departments data available to the authorized client | -   [GET List departments](https://developer.rippling.com/documentation/rest-api/reference/list-departments)<br>-   [GET Retrieve a specific department](https://developer.rippling.com/documentation/rest-api/reference/get-departments) |
| `departments.read-write` | Read and write departments data available to the authorized client | -   [POST Create a new department](https://developer.rippling.com/documentation/rest-api/reference/create-departments)<br>-   [PATCH Update a department](https://developer.rippling.com/documentation/rest-api/reference/update-departments) |
| `device-orders.read` | Read device orders data available to the authorized client | -   [GET List device orders](https://developer.rippling.com/documentation/rest-api/reference/list-device-orders)<br>-   [GET Retrieve a specific device order](https://developer.rippling.com/documentation/rest-api/reference/get-device-orders) |
| `devices.read` | Read devices data available to the authorized client | -   [GET List devices](https://developer.rippling.com/documentation/rest-api/reference/list-devices)<br>-   [GET Retrieve a specific device](https://developer.rippling.com/documentation/rest-api/reference/get-devices) |
| `draft-hires.read-write` | Read and write draft hires data available to the authorized client | -   [POST Create bulk draft hire](https://developer.rippling.com/documentation/rest-api/reference/create-draft-hires) |
| `draft-transitions.read` | Read draft transitions data available to the authorized client | -   [GET Retrieve a specific draft transition](https://developer.rippling.com/documentation/rest-api/reference/get-draft-transitions) |
| `draft-transitions.read-write` | Read and write draft transitions data available to the authorized client | -   [POST Create a new draft transition](https://developer.rippling.com/documentation/rest-api/reference/create-draft-transitions) |
| `employee-documents.read-write` | Read and write employee documents data available to the authorized client | -   [POST Create a new employee document](https://developer.rippling.com/documentation/rest-api/reference/create-employee-documents) |
| `employment-types.read` | Read employment types data available to the authorized client | -   [GET List employment types](https://developer.rippling.com/documentation/rest-api/reference/list-employment-types)<br>-   [GET Retrieve a specific employment type](https://developer.rippling.com/documentation/rest-api/reference/get-employment-types) |
| `entitlements.read` | Read entitlements data available to the authorized client | -   [GET List entitlements](https://developer.rippling.com/documentation/rest-api/reference/list-entitlements) |
| `files.read` | Read files data available to the authorized client | -   [GET Retrieve a specific file](https://developer.rippling.com/documentation/rest-api/reference/get-files) |
| `files.read-write` | Read and write files data available to the authorized client | -   [POST Create a new file](https://developer.rippling.com/documentation/rest-api/reference/create-files) |
| `function-executions.read` | Read function executions data available to the authorized client | -   [GET List function executions](https://developer.rippling.com/documentation/rest-api/reference/list-functions-function-api-name-executions)<br>-   [GET Retrieve a specific function execution](https://developer.rippling.com/documentation/rest-api/reference/get-functions-function-api-name-executions)<br>-   [GET List function execution logs](https://developer.rippling.com/documentation/rest-api/reference/list-functions-function-api-name-executions-execution-id-logs) |
| `function-executions.read-write` | Read and write function executions data available to the authorized client | -   [GET List function executions](https://developer.rippling.com/documentation/rest-api/reference/list-functions-function-api-name-executions)<br>-   [POST Create a new function execution](https://developer.rippling.com/documentation/rest-api/reference/create-functions-function-api-name-executions)<br>-   [GET Retrieve a specific function execution](https://developer.rippling.com/documentation/rest-api/reference/get-functions-function-api-name-executions)<br>-   [GET List function execution logs](https://developer.rippling.com/documentation/rest-api/reference/list-functions-function-api-name-executions-execution-id-logs) |
| `function-executions.read-write.owner` | Read and write executions for functions the authorizing role can run | -   [GET List function executions](https://developer.rippling.com/documentation/rest-api/reference/list-functions-function-api-name-executions)<br>-   [POST Create a new function execution](https://developer.rippling.com/documentation/rest-api/reference/create-functions-function-api-name-executions)<br>-   [GET Retrieve a specific function execution](https://developer.rippling.com/documentation/rest-api/reference/get-functions-function-api-name-executions)<br>-   [GET List function execution logs](https://developer.rippling.com/documentation/rest-api/reference/list-functions-function-api-name-executions-execution-id-logs) |
| `function-executions.write` | Write function executions data available to the authorized client | -   [POST Create a new function execution](https://developer.rippling.com/documentation/rest-api/reference/create-functions-function-api-name-executions) |
| `functions.read` | Read functions data available to the authorized client | -   [GET List functions](https://developer.rippling.com/documentation/rest-api/reference/list-functions)<br>-   [GET Retrieve a specific function](https://developer.rippling.com/documentation/rest-api/reference/get-functions)<br>-   [GET List function deployments](https://developer.rippling.com/documentation/rest-api/reference/list-functions-function-api-name-deployments)<br>-   [GET Retrieve a specific function deployment](https://developer.rippling.com/documentation/rest-api/reference/get-functions-function-api-name-deployments)<br>-   [GET List function deployment logs](https://developer.rippling.com/documentation/rest-api/reference/list-functions-function-api-name-deployments-deployment-id-logs) |
| `functions.read-write` | Read and write functions data available to the authorized client | -   [GET List functions](https://developer.rippling.com/documentation/rest-api/reference/list-functions)<br>-   [POST Create a new function](https://developer.rippling.com/documentation/rest-api/reference/create-functions)<br>-   [GET Retrieve a specific function](https://developer.rippling.com/documentation/rest-api/reference/get-functions)<br>-   [DELETE Delete a function](https://developer.rippling.com/documentation/rest-api/reference/delete-functions)<br>-   [GET List function deployments](https://developer.rippling.com/documentation/rest-api/reference/list-functions-function-api-name-deployments)<br>-   [POST Create a new function deployment](https://developer.rippling.com/documentation/rest-api/reference/create-functions-function-api-name-deployments)<br>-   [GET Retrieve a specific function deployment](https://developer.rippling.com/documentation/rest-api/reference/get-functions-function-api-name-deployments)<br>-   [GET List function deployment logs](https://developer.rippling.com/documentation/rest-api/reference/list-functions-function-api-name-deployments-deployment-id-logs)<br>-   [POST Create a new function dev bundle](https://developer.rippling.com/documentation/rest-api/reference/create-functions-function-api-name-dev-bundles) |
| `headcount-positions.read` | Read headcount positions data available to the authorized client | -   [GET List headcount positions](https://developer.rippling.com/documentation/rest-api/reference/list-headcount-positions)<br>-   [GET Retrieve a specific headcount position](https://developer.rippling.com/documentation/rest-api/reference/get-headcount-positions) |
| `headcount-priorities.read` | Read headcount priorities data available to the authorized client | -   [GET List headcount priorities](https://developer.rippling.com/documentation/rest-api/reference/list-headcount-priorities)<br>-   [GET Retrieve a specific headcount priority](https://developer.rippling.com/documentation/rest-api/reference/get-headcount-priorities) |
| `job-assignments.read` | Read job assignments data available to the authorized client | -   [GET List job assignments](https://developer.rippling.com/documentation/rest-api/reference/list-job-assignments)<br>-   [GET Retrieve a specific job assignment](https://developer.rippling.com/documentation/rest-api/reference/get-job-assignments)<br>-   [GET List attribute change logs](https://developer.rippling.com/documentation/rest-api/reference/list-job-assignments-job-assignment-id-change-log) |
| `job-assignments.read-write` | Read and write job assignments data available to the authorized client | -   [POST Create a new job assignment](https://developer.rippling.com/documentation/rest-api/reference/create-job-assignments)<br>-   [PATCH Update a job assignment](https://developer.rippling.com/documentation/rest-api/reference/update-job-assignments)<br>-   [DELETE Delete a job assignment](https://developer.rippling.com/documentation/rest-api/reference/delete-job-assignments) |
| `job-codes.read` | Read job codes data available to the authorized client | -   [GET List job codes](https://developer.rippling.com/documentation/rest-api/reference/list-job-codes)<br>-   [GET Retrieve a specific job code](https://developer.rippling.com/documentation/rest-api/reference/get-job-codes)<br>-   [GET List attribute change logs](https://developer.rippling.com/documentation/rest-api/reference/list-job-codes-job-code-id-change-log) |
| `job-codes.read-write` | Read and write job codes data available to the authorized client | -   [POST Create a new job code](https://developer.rippling.com/documentation/rest-api/reference/create-job-codes)<br>-   [PATCH Update a job code](https://developer.rippling.com/documentation/rest-api/reference/update-job-codes)<br>-   [DELETE Delete a job code](https://developer.rippling.com/documentation/rest-api/reference/delete-job-codes) |
| `job-dimensions.read` | Read job dimensions data available to the authorized client | -   [GET List job dimensions](https://developer.rippling.com/documentation/rest-api/reference/list-job-dimensions)<br>-   [GET Retrieve a specific job dimension](https://developer.rippling.com/documentation/rest-api/reference/get-job-dimensions) |
| `job-dimensions.read-write` | Read and write job dimensions data available to the authorized client | -   [POST Create a new job dimension](https://developer.rippling.com/documentation/rest-api/reference/create-job-dimensions)<br>-   [PATCH Update a job dimension](https://developer.rippling.com/documentation/rest-api/reference/update-job-dimensions)<br>-   [DELETE Delete a job dimension](https://developer.rippling.com/documentation/rest-api/reference/delete-job-dimensions) |
| `job-functions.read` | Read job functions data available to the authorized client | -   [GET List job functions](https://developer.rippling.com/documentation/rest-api/reference/list-job-functions)<br>-   [GET Retrieve a specific job function](https://developer.rippling.com/documentation/rest-api/reference/get-job-functions) |
| `job-pay-rate-exceptions.read` | Read job pay rate exceptions data available to the authorized client | -   [GET List job pay rate exceptions](https://developer.rippling.com/documentation/rest-api/reference/list-job-pay-rate-exceptions)<br>-   [GET Retrieve a specific job pay rate exception](https://developer.rippling.com/documentation/rest-api/reference/get-job-pay-rate-exceptions)<br>-   [GET List attribute change logs](https://developer.rippling.com/documentation/rest-api/reference/list-job-pay-rate-exceptions-job-pay-rate-exception-id-change-log) |
| `job-requisitions-write.read-write` | Read and write job requisitions data available to the authorized client | -   [POST Create a new job requisition](https://developer.rippling.com/documentation/rest-api/reference/create-job-requisitions-write) |
| `job-requisitions.read` | Read job requisitions data available to the authorized client | -   [GET List job requisitions](https://developer.rippling.com/documentation/rest-api/reference/list-job-requisitions) |
| `kiosk-badges.read` | Read kiosk badges data available to the authorized client | -   [GET List kiosk badges](https://developer.rippling.com/documentation/rest-api/reference/list-kiosk-badges)<br>-   [GET Retrieve a specific kiosk badge](https://developer.rippling.com/documentation/rest-api/reference/get-kiosk-badges) |
| `kiosk-badges.read-write` | Read and write kiosk badges data available to the authorized client | -   [POST Create a new kiosk badge](https://developer.rippling.com/documentation/rest-api/reference/create-kiosk-badges)<br>-   [PATCH Update a kiosk badge](https://developer.rippling.com/documentation/rest-api/reference/update-kiosk-badges)<br>-   [DELETE Delete a kiosk badge](https://developer.rippling.com/documentation/rest-api/reference/delete-kiosk-badges) |
| `leave-accruals.read` | Read leave accruals data available to the authorized client | -   [GET List leave accruals](https://developer.rippling.com/documentation/rest-api/reference/list-leave-accruals)<br>-   [GET Retrieve a specific leave accrual](https://developer.rippling.com/documentation/rest-api/reference/get-leave-accruals) |
| `leave-accruals.read-write` | Read and write leave accruals data available to the authorized client | -   [POST Create a new leave accrual](https://developer.rippling.com/documentation/rest-api/reference/create-leave-accruals) |
| `leave-balances.read` | Read leave balances data available to the authorized client | -   [GET List leave balances](https://developer.rippling.com/documentation/rest-api/reference/list-leave-balances)<br>-   [GET Retrieve a specific leave balance](https://developer.rippling.com/documentation/rest-api/reference/get-leave-balances) |
| `leave-requests.read` | Read leave requests data available to the authorized client | -   [GET List leave requests](https://developer.rippling.com/documentation/rest-api/reference/list-leave-requests)<br>-   [GET Retrieve a specific leave request](https://developer.rippling.com/documentation/rest-api/reference/get-leave-requests) |
| `leave-requests.read-write` | Read and write leave requests data available to the authorized client | -   [POST Create a new leave request](https://developer.rippling.com/documentation/rest-api/reference/create-leave-requests)<br>-   [PATCH Update a leave request](https://developer.rippling.com/documentation/rest-api/reference/update-leave-requests) |
| `leave-types.read` | Read leave types data available to the authorized client | -   [GET List leave types](https://developer.rippling.com/documentation/rest-api/reference/list-leave-types)<br>-   [GET Retrieve a specific leave type](https://developer.rippling.com/documentation/rest-api/reference/get-leave-types) |
| `legal-entities.read` | Read legal entities data available to the authorized client | -   [GET List legal entities](https://developer.rippling.com/documentation/rest-api/reference/list-legal-entities)<br>-   [GET Retrieve a specific legal entity](https://developer.rippling.com/documentation/rest-api/reference/get-legal-entities) |
| `levels.read` | Read levels data available to the authorized client | -   [GET List levels](https://developer.rippling.com/documentation/rest-api/reference/list-levels)<br>-   [GET Retrieve a specific level](https://developer.rippling.com/documentation/rest-api/reference/get-levels) |
| `levels.read-write` | Read and write levels data available to the authorized client | -   [POST Create a new level](https://developer.rippling.com/documentation/rest-api/reference/create-levels)<br>-   [PATCH Update a level](https://developer.rippling.com/documentation/rest-api/reference/update-levels)<br>-   [DELETE Delete a level](https://developer.rippling.com/documentation/rest-api/reference/delete-levels) |
| `location-factors.read` | Read location factors data available to the authorized client | -   [GET List location factors](https://developer.rippling.com/documentation/rest-api/reference/list-location-factors)<br>-   [GET Retrieve a specific location factor](https://developer.rippling.com/documentation/rest-api/reference/get-location-factors) |
| `scheduled-job-assignments.read` | Read scheduled job assignments data available to the authorized client | -   [GET List scheduled job assignments](https://developer.rippling.com/documentation/rest-api/reference/list-scheduled-job-assignments)<br>-   [GET Retrieve a specific scheduled job assignment](https://developer.rippling.com/documentation/rest-api/reference/get-scheduled-job-assignments) |
| `scheduled-job-assignments.read-write` | Read and write scheduled job assignments data available to the authorized client | -   [DELETE Delete a scheduled job assignment](https://developer.rippling.com/documentation/rest-api/reference/delete-scheduled-job-assignments) |
| `schedules.read` | Read schedules data available to the authorized client | -   [GET List schedules](https://developer.rippling.com/documentation/rest-api/reference/list-schedules)<br>-   [GET Retrieve a specific schedule](https://developer.rippling.com/documentation/rest-api/reference/get-schedules) |
| `schedules.read-write` | Read and write schedules data available to the authorized client | -   [POST Create a new schedule](https://developer.rippling.com/documentation/rest-api/reference/create-schedules)<br>-   [PATCH Update a schedule](https://developer.rippling.com/documentation/rest-api/reference/update-schedules) |
| `shift-inputs.read` | Read shift inputs data available to the authorized client | -   [GET List shift inputs](https://developer.rippling.com/documentation/rest-api/reference/list-shift-inputs)<br>-   [GET Retrieve a specific shift input](https://developer.rippling.com/documentation/rest-api/reference/get-shift-inputs) |
| `shift-inputs.read-write` | Read and write shift inputs data available to the authorized client | -   [POST Create a new shift input](https://developer.rippling.com/documentation/rest-api/reference/create-shift-inputs)<br>-   [PATCH Update a shift input](https://developer.rippling.com/documentation/rest-api/reference/update-shift-inputs)<br>-   [DELETE Delete a shift input](https://developer.rippling.com/documentation/rest-api/reference/delete-shift-inputs) |
| `shiftassignments.read` | Read shift assignments data available to the authorized client | -   [GET List shift assignments](https://developer.rippling.com/documentation/rest-api/reference/list-shiftassignments)<br>-   [GET Retrieve a specific shift assignment](https://developer.rippling.com/documentation/rest-api/reference/get-shiftassignments) |
| `shiftassignments.read-write` | Read and write shift assignments data available to the authorized client | -   [POST Create a new shift assignment](https://developer.rippling.com/documentation/rest-api/reference/create-shiftassignments)<br>-   [PATCH Update a shift assignment](https://developer.rippling.com/documentation/rest-api/reference/update-shiftassignments)<br>-   [PATCH Update custom fields for a shift assignment](https://developer.rippling.com/documentation/rest-api/reference/update-shiftassignments-customfields) |
| `sites.read` | Read Sites data available to the authorized client | -   [GET List Sites](https://developer.rippling.com/documentation/rest-api/reference/list-sites)<br>-   [GET Retrieve a specific site](https://developer.rippling.com/documentation/rest-api/reference/get-sites)<br>-   [GET List files in the active bundle](https://developer.rippling.com/documentation/rest-api/reference/files-sites) |
| `sites.read-write` | Read and write Sites data available to the authorized client | -   [POST Create a new site](https://developer.rippling.com/documentation/rest-api/reference/create-sites)<br>-   [PATCH Update a site](https://developer.rippling.com/documentation/rest-api/reference/update-sites)<br>-   [DELETE Delete a site](https://developer.rippling.com/documentation/rest-api/reference/delete-sites)<br>-   [POST Create a presigned staged upload batch](https://developer.rippling.com/documentation/rest-api/reference/upload-batches-presign-sites)<br>-   [POST Apply file operations to a site bundle](https://developer.rippling.com/documentation/rest-api/reference/file-operations-sites) |
| `software-deployments.read` | Read software deployment details | -   [GET List software deployments](https://developer.rippling.com/documentation/rest-api/reference/list-software-deployments)<br>-   [GET Retrieve a specific software deployment](https://developer.rippling.com/documentation/rest-api/reference/get-software-deployments) |
| `software-deployments.read-write` | Read and write software deployments data available to the authorized client | -   [POST Create a new software deployment](https://developer.rippling.com/documentation/rest-api/reference/create-software-deployments)<br>-   [PATCH Update a software deployment](https://developer.rippling.com/documentation/rest-api/reference/update-software-deployments)<br>-   [DELETE Delete a software deployment](https://developer.rippling.com/documentation/rest-api/reference/delete-software-deployments) |
| `sso-me.read` | Read sso-me data available to the authorized client | -   [GET Retrieve my SSO information](https://developer.rippling.com/documentation/rest-api/reference/list-sso-me) |
| `supergroups.read` | Read supergroups data available to the authorized client | -   [GET List supergroups](https://developer.rippling.com/documentation/rest-api/reference/list-supergroups)<br>-   [GET Retrieve a specific supergroup](https://developer.rippling.com/documentation/rest-api/reference/get-supergroups)<br>-   [GET List supergroup members](https://developer.rippling.com/documentation/rest-api/reference/list-supergroups-group-id-members)<br>-   [GET List supergroup inclusion members](https://developer.rippling.com/documentation/rest-api/reference/list-supergroups-group-id-inclusion-members)<br>-   [GET List supergroup exclusion members](https://developer.rippling.com/documentation/rest-api/reference/list-supergroups-group-id-exclusion-members) |
| `supergroups.read-write` | Read and write supergroups data available to the authorized client | -   [PATCH Update supergroup inclusion members](https://developer.rippling.com/documentation/rest-api/reference/update-supergroups-group-id-inclusion-members)<br>-   [PATCH Update supergroup exclusion members](https://developer.rippling.com/documentation/rest-api/reference/update-supergroups-group-id-exclusion-members) |
| `teams.read` | Read teams data available to the authorized client | -   [GET List teams](https://developer.rippling.com/documentation/rest-api/reference/list-teams)<br>-   [GET Retrieve a specific team](https://developer.rippling.com/documentation/rest-api/reference/get-teams) |
| `teams.read-write` | Read and write teams data available to the authorized client | -   [POST Create a new team](https://developer.rippling.com/documentation/rest-api/reference/create-teams)<br>-   [PATCH Update a team](https://developer.rippling.com/documentation/rest-api/reference/update-teams)<br>-   [DELETE Delete a team](https://developer.rippling.com/documentation/rest-api/reference/delete-teams) |
| `time-cards.read` | Read time cards data available to the authorized client | -   [GET List time cards](https://developer.rippling.com/documentation/rest-api/reference/list-time-cards)<br>-   [GET Retrieve a specific time card](https://developer.rippling.com/documentation/rest-api/reference/get-time-cards) |
| `time-entries.read` | Read time entries data available to the authorized client | -   [GET List time entries](https://developer.rippling.com/documentation/rest-api/reference/list-time-entries)<br>-   [GET Retrieve a specific time entry](https://developer.rippling.com/documentation/rest-api/reference/get-time-entries) |
| `time-entries.read-write` | Read and write time entries data available to the authorized client | -   [POST Create a new time entry](https://developer.rippling.com/documentation/rest-api/reference/create-time-entries)<br>-   [PATCH Update a time entry](https://developer.rippling.com/documentation/rest-api/reference/update-time-entries)<br>-   [DELETE Delete a time entry](https://developer.rippling.com/documentation/rest-api/reference/delete-time-entries) |
| `titles.read` | Read titles data available to the authorized client | -   [GET List titles](https://developer.rippling.com/documentation/rest-api/reference/list-titles)<br>-   [GET Retrieve a specific title](https://developer.rippling.com/documentation/rest-api/reference/get-titles) |
| `titles.read-write` | Read and write titles data available to the authorized client | -   [POST Create a new title](https://developer.rippling.com/documentation/rest-api/reference/create-titles)<br>-   [PATCH Update a title](https://developer.rippling.com/documentation/rest-api/reference/update-titles)<br>-   [DELETE Delete a title](https://developer.rippling.com/documentation/rest-api/reference/delete-titles) |
| `tracks.read` | Read tracks data available to the authorized client | -   [GET List tracks](https://developer.rippling.com/documentation/rest-api/reference/list-tracks)<br>-   [GET Retrieve a specific track](https://developer.rippling.com/documentation/rest-api/reference/get-tracks) |
| `tracks.read-write` | Read and write tracks data available to the authorized client | -   [POST Create a new track](https://developer.rippling.com/documentation/rest-api/reference/create-tracks)<br>-   [PATCH Update a track](https://developer.rippling.com/documentation/rest-api/reference/update-tracks)<br>-   [DELETE Delete a track](https://developer.rippling.com/documentation/rest-api/reference/delete-tracks) |
| `unassignedshifts.read` | Read unassigned shifts data available to the authorized client | -   [GET List unassigned shifts](https://developer.rippling.com/documentation/rest-api/reference/list-unassignedshifts)<br>-   [GET Retrieve a specific unassigned shift](https://developer.rippling.com/documentation/rest-api/reference/get-unassignedshifts) |
| `unassignedshifts.read-write` | Read and write unassigned shifts data available to the authorized client | -   [POST Create a new unassigned shift](https://developer.rippling.com/documentation/rest-api/reference/create-unassignedshifts)<br>-   [PATCH Update a unassigned shift](https://developer.rippling.com/documentation/rest-api/reference/update-unassignedshifts)<br>-   [PATCH Update custom fields for a unassigned shift](https://developer.rippling.com/documentation/rest-api/reference/update-unassignedshifts-customfields)<br>-   [POST Assign a worker to an unassigned shift](https://developer.rippling.com/documentation/rest-api/reference/assign-unassignedshifts) |
| `users.read` | Read users data available to the authorized client | -   [GET List users](https://developer.rippling.com/documentation/rest-api/reference/list-users)<br>-   [GET Retrieve a specific user](https://developer.rippling.com/documentation/rest-api/reference/get-users) |
| `work-locations.read` | Read work locations data available to the authorized client | -   [GET List work locations](https://developer.rippling.com/documentation/rest-api/reference/list-work-locations)<br>-   [GET Retrieve a specific work location](https://developer.rippling.com/documentation/rest-api/reference/get-work-locations) |
| `work-locations.read-write` | Read and write work locations data available to the authorized client | -   [POST Create a new work location](https://developer.rippling.com/documentation/rest-api/reference/create-work-locations)<br>-   [PATCH Update a work location](https://developer.rippling.com/documentation/rest-api/reference/update-work-locations)<br>-   [DELETE Delete a work location](https://developer.rippling.com/documentation/rest-api/reference/delete-work-locations) |
| `worker-time-splits.read` | Read worker time splits data available to the authorized client | -   [GET List worker time splits](https://developer.rippling.com/documentation/rest-api/reference/list-worker-time-splits)<br>-   [GET Retrieve a specific worker time split](https://developer.rippling.com/documentation/rest-api/reference/get-worker-time-splits) |
| `worker-time-splits.read-write` | Read and write worker time splits data available to the authorized client | -   [POST Create a new worker time split](https://developer.rippling.com/documentation/rest-api/reference/create-worker-time-splits)<br>-   [PATCH Update a worker time split](https://developer.rippling.com/documentation/rest-api/reference/update-worker-time-splits)<br>-   [DELETE Delete a worker time split](https://developer.rippling.com/documentation/rest-api/reference/delete-worker-time-splits) |
| `workers.read` | Read workers data available to the authorized client | -   [GET List workers](https://developer.rippling.com/documentation/rest-api/reference/list-workers)<br>-   [GET Retrieve a specific worker](https://developer.rippling.com/documentation/rest-api/reference/get-workers) |
| `workflow-executions.read` | Read workflow executions available to the authorized client | -   [GET Retrieve a workflow execution](https://developer.rippling.com/documentation/rest-api/reference/get-workflow-execution) |
| `workflow-executions.read-write` | Read and write workflow executions available to the authorized client | -   [POST Execute a workflow](https://developer.rippling.com/documentation/rest-api/reference/create-workflow-execution)<br>-   [GET Retrieve a workflow execution](https://developer.rippling.com/documentation/rest-api/reference/get-workflow-execution) |
| `workflows.read` | Read workflows available to the authorized client | -   [GET List workflows](https://developer.rippling.com/documentation/rest-api/reference/list-workflows)<br>-   [GET Retrieve a workflow](https://developer.rippling.com/documentation/rest-api/reference/get-workflows) |
| `workflows.read-write` | Read and write workflows available to the authorized client | -   [POST Create a workflow](https://developer.rippling.com/documentation/rest-api/reference/create-workflows)<br>-   [PATCH Update a workflow](https://developer.rippling.com/documentation/rest-api/reference/update-workflows)<br>-   [DELETE Delete a workflow](https://developer.rippling.com/documentation/rest-api/reference/delete-workflows) |

Source: https://developer.rippling.com/documentation/rest-api/essentials/permissions

> For the complete documentation index, see [llms.txt](https://developer.rippling.com/llms.txt). Public pages have a Markdown version at the same URL with .md added.