Private App does not have access to orders in GraphQL API

Topic summary

Main issue: A private development app using Shopify’s GraphQL API couldn’t read orders because the necessary permission (scope) wasn’t enabled. The user only saw the read_all_orders scope in the admin UI and wasn’t sure how to get basic read access.

Key details: The thread references Shopify’s getting-started docs and includes screenshots of the app’s access scopes in the admin. Scopes are permissions that grant the app access to specific API resources (e.g., orders).

Resolution/update: The app’s default Next.js server configuration automatically sets scopes. Updating that configuration to include the read_orders scope resolved the access problem. After adding read_orders, the app gained the needed permission to read orders.

Outcome: Issue resolved by changing the app’s server-side scope configuration rather than relying solely on the admin UI. No further disagreements or open questions noted.

Summarized with AI on February 21. AI used: gpt-5.

I’m following the docs here: https://shopify.dev/apps/getting-started/add-functionality#next-steps

Instead of getting product on my development private app I am getting orders. However, I apparently don’t have any access scope to read orders. I went to enable it but the only scope i could find was read_all_orders.

Am I missing something?

Ok I finally figured it out. The default app has a next.js server that has some scopes automatically created. I updated that to include the read_orders scope.