scope parameter of the authorization request. The user sees each one on the consent screen. Every endpoint states its required scope, and a request without it returns 403 Forbidden.
Available scopes
A
write scope includes its read counterpart. Requesting project.webhooks.write also lets you list webhooks without requesting project.webhooks.read.
user.* scopes apply to the authorizing user. project.* scopes apply to every project the user selected during authorization.