---
title: "Assign CIMD user consent scopes"
method: POST
path: "/api/cimd/user-consent-scopes"
tags: ["CIMD"]
---

# Assign CIMD user consent scopes

`POST /api/cimd/user-consent-scopes`

Add scopes to the tenant-level permission ceiling for CIMD clients. Database-backed scopes are referenced by ID; Management API scopes can never be selected.

## Request body

- object
  - `organizationScopes` string[]
  - `resourceScopes` string[]
  - `organizationResourceScopes` string[]
  - `userScopes` string[]

## Response `201`

The scopes were assigned.

## Other responses

- `400` — Bad Request
- `401` — Unauthorized
- `403` — Forbidden
- `422` — Some scopes do not exist or are not allowed.

---

[API](https://skmtc.net/logto/apis/logto-api-references.md) · [All operations](https://skmtc.net/logto/apis/logto-api-references/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/logto/logto-api-references/revisions/0287c6a59eba/schema)