Access Token Permissions
When you create an access token in Control Center, the Permission Type list shows a HYPR Adapt group on tenants that have HYPR Adapt enabled. This page explains what each of those permissions grants and gives the OAuth scope that goes with it.
For how to create a token and choose its permissions, see Access Tokens. For the Control Center and Application permissions on the same dialog, see Token Permissions.
Select All ticks every permission in the list, not just the group you are looking at, so a token meant to read login events also gains the permissions on this page. Tick the specific permissions the integration needs instead.
Read and write apply to the stored configuration; evaluate and test run the object without changing it.
| Permission | OAuth scope | What a token with this permission can do |
|---|---|---|
| Read-only Adapt Policies | hypr:adapt:readPolicy | Read risk policies and their configuration. |
| Read/Write Adapt Policies | hypr:adapt:writePolicy | Create, change, and delete risk policies. |
| Evaluate Adapt Policies | hypr:adapt:evalPolicy | Run a policy evaluation and receive the decision. This is the permission an integration needs to have risk decisions made for it. |
| Test Adapt Policies | hypr:adapt:testPolicy | Run a policy against sample input to see the outcome, without recording an evaluation. |
| Read-only Adapt Signal Handlers | hypr:adapt:readEventHandlers | Read the signal handlers that receive risk signals from external sources. |
| Read/Write Adapt Signal Handlers | hypr:adapt:writeEventHandlers | Create, change, and delete signal handlers. |
| Test Adapt Signal Handlers | hypr:adapt:testEventHandlers | Send test input through a signal handler. |
| Read-only Adapt Events | hypr:adapt:readEvents | Read the risk events recorded for the tenant. |
| Read/Write Adapt Events | hypr:adapt:writeEvents | Submit risk events to the tenant. |
The Access Tokens list shortens these names and marks the level of access with a letter, where (R) is read-only and (R/W) is read/write. Read/Write Adapt Policies appears there as Adapt Policies (R/W).
For what these objects are, see HYPR Adapt. For the calls themselves, see the HYPR Adapt API in the API collection.