All Products
Search
Document Center

Identity as a Service:GetResourceServerScope

Last Updated:Jan 19, 2026

Retrieves the permission scopes for a specified resource server.

Try it now

Try this API in OpenAPI Explorer, no manual signing needed. Successful calls auto-generate SDK code matching your parameters. Download it with built-in credential security for local usage.

Test

RAM authorization

No authorization for this operation. If you encounter issues with this operation, contact technical support.

Request parameters

Parameter

Type

Required

Description

Example

InstanceId

string

Yes

The instance ID.

idaas_ue2jvisn35ea5lmthk267xxxxx

ApplicationId

string

Yes

The application ID.

app_mkv7rgt4d7i4u7zqtzev2mxxxx

ResourceServerScopeId

string

Yes

The ID of the scope permission.

ress_neg35flu6byysxwutaxu3dxxxx

Response elements

Element

Type

Description

Example

object

RequestId

string

The request ID.

0441BD79-92F3-53AA-8657-F8CE4A2B912A

ResourceServerScope

object

The information about the scope permission of the resource server.

InstanceId

string

The instance ID.

idaas_xxxxxxxxxxx

ApplicationId

string

The application ID.

app_xxxxxxxxxxx

ResourceServerScopeId

string

The ID of the scope permission.

rss_xxxxxxxxxxx

ResourceServerScopeName

string

The name of the scope permission.

读取全部用户

ResourceServerScopeValue

string

The value of the scope permission.

User:Read:ALL

ResourceServerScopeType

string

The type of the scope permission.

Valid values:

  • urn:alibaba:idaas:resourceserver:scope:application :

    Machine permission

  • urn:alibaba:idaas:resourceserver:scope:application_delegated :

    urn:alibaba:idaas:resourceserver:scope:application_delegated

  • urn:alibaba:idaas:resourceserver:scope:delegated :

    User permission

  • 人员&机器权限 :

    User & machine permission

urn:alibaba:idaas:resourceserver:scope:delegated

AuthorizationType

string

The authorization type.

Valid values:

  • authorize_required :

    Manual authorization

  • default_all :

    Automatic authorization

authorize_required

Examples

Success response

JSON format

{
  "RequestId": "0441BD79-92F3-53AA-8657-F8CE4A2B912A",
  "ResourceServerScope": {
    "InstanceId": "idaas_xxxxxxxxxxx",
    "ApplicationId": "app_xxxxxxxxxxx",
    "ResourceServerScopeId": "rss_xxxxxxxxxxx",
    "ResourceServerScopeName": "读取全部用户",
    "ResourceServerScopeValue": "User:Read:ALL",
    "ResourceServerScopeType": "urn:alibaba:idaas:resourceserver:scope:delegated",
    "AuthorizationType": "authorize_required"
  }
}

Error codes

See Error Codes for a complete list.

Release notes

See Release Notes for a complete list.