When generating an API token, you need to select scope for it. The selected scope enables you to use different APIs. APIs that can be used vary depending on the scope you have selected.
This page describes the APIs that can be used in each scope.

By selecting the "Read" scope, getting data such as user and organization information is allowed.​​

• Get Users
• Get User's Departments
• Get User's Groups
• Get User Services
• Get Departments
• Get Department's Users
• Get Groups
• Get Group's Users
• Check the import results
• Export user information
• Export user services
• Export department information
• Export user's departments
• Export job title information
• Export group information
• Export user's groups (or roles)

By selecting the "Read and Write" scope, getting and changing data such as user and organization information are allowed.​​
However, changing the information of users who belong to the "Administrators" group or the group information to which users belong is not allowed.​​

• ​APIs that can be used in the "Read" scope
• Add Users
• Update User Codes
• Update User's Departments
• Update User Services
• Add Departments
• Update Departments
• Delete Departments
• Update Department Codes
• Add Groups
• Update Groups
• Delete Groups
• Update Group Codes
• Upload files
• Import user services
• Import department information
• Import user's departments
• Import job title information
• Import group information

The following APIs can be used only when the information of users who do not belong to the "Administrators" group is included.​​

• Update Users
• Deleting users

By selecting the "Dangerous Zone" scope, all User API usage is allowed. Changing the information of users who belong to the "Administrators" group and the group information to which users belong is allowed.​​​​

• ​APIs that can be used in the "Read and Write" scope
• Update Users
• Deleting users
• Update User's Groups
• Update Group's Users
• Import user information
• Import user's groups (or roles)

The "Audit Log Read" scope allows you to run APIs used for SIEM integration.
SIEM integration

To use this scope, you need to have a Wide plan. For details about the Wide plan, refer to the following page:
Wide Plan Features (Japanese only)