Focuses on API authentication, access scopes, and permission management.
We're moving the community! Starting July 7, the current community will be read-only for approx. 2 weeks. You can browse content, but posting will be temporarily unavailable. Learn more
We have a partner who wants to install our app, which will push orders through to their store. However, on installing the app, it refers to scopes which the partner does not want to agree to - having spoken with support, these are
read_customer_address
read_customer_email
read_customer_name
read_customer_personal_data
read_customer_phone
We don't need these. The current app access scopes are read_products and write_orders.
Does anyone know how we can remove these unwanted read_customer scopes, or if there is another more specific access scope that will allow for pushing orders, that don't require them?
Thanks!