Focuses on API authentication, access scopes, and permission management.
We have a partner who wants to install our app, which will push orders through to their store. However, on installing the app, it refers to scopes which the partner does not want to agree to - having spoken with support, these are
read_customer_address
read_customer_email
read_customer_name
read_customer_personal_data
read_customer_phone
We don't need these. The current app access scopes are read_products and write_orders.
Does anyone know how we can remove these unwanted read_customer scopes, or if there is another more specific access scope that will allow for pushing orders, that don't require them?
Thanks!