User applications rely on self-management scopes to grant users access to a subset of PingOne resources. For more information about scopes, see Resource scopes. Conversely, administrator applications use role assignments to determine the actions a user or client can perform. For more information about roles, see Roles.

For detailed information about scopes, see the following topics:

• PingOne self-management scopes

• OpenID Connect (OIDC) scopes

• Custom scopes