Rather Technical: All OAuth scopes in TFS

Did I already complain that the API surface of Team Foundation Server is sorely underdocumented? Well, it is. In today's episode, we're going to explore the gamut of things an OAuth Web client can and cannot do.

In my work, the OAuth clients are TFS client-side extensions. In order to access the TFS API, they need to declare the set of scopes they're interested in in the extension manifest. The scopes are supposed to be documented here, but the list over there is incomplete.

Fortunately, one can dump a complete list from a live instance of on-prem TFS, together with API endpoints that they cover. Copy the linked file to C:\Program Files\Microsoft Team Foundation Server NN\Application Tier\Web Services on the TFS Web server, then navigate to http://mytfs:8080/tfs/tfsscopes.aspx. I've done exactly that, and here's the list for TFS 2017 update 2.

UPDATE: here's a similar list for TFS 2018 update 1. And for ~~TFS~~ Azure DevOps 2019.

Not all endpoints that are listed here are live in the on-prem TFS. Some return error 404; I presume they're only active in VSTS. For example, most of the endpoints under vso.profile are unusable.

Also, not all endpoints, period, are listed here. For example, the extremely useful endpoint /_api/_common/GetUserProfile isn't listed. I guess, it's not supposed to be called with OAuth, only with NTLM auth.

preview_api_all

/_apis#OPTIONS
/DefaultCollection/_apis#OPTIONS
/_apis/connectiondata#GET
/DefaultCollection/_apis/connectiondata#GET
/_apis/ServiceDefinitions#GET
/_apis/build/builds#GET+PATCH+DELETE
/_apis/build/qualities#GET+PUT+DELETE
/_apis/build/requests#GET+POST+PATCH+DELETE
/_apis/build/definitions
/_apis/build/queues
/DefaultCollection/_apis/build/builds#GET+PATCH+DELETE
/DefaultCollection/_apis/build/qualities#GET+PUT+DELETE
/DefaultCollection/_apis/build/requests#GET+POST+PATCH+DELETE
/DefaultCollection/_apis/build/definitions
/DefaultCollection/_apis/build/queues
/DefaultCollection/_apis/resources/Containers#GET
/DefaultCollection/*/_apis/build/builds#GET+PATCH+DELETE+PUT+POST
/DefaultCollection/*/_apis/build/definitions#GET+POST+PUT+DELETE
/DefaultCollection/*/_apis/build/requests#GET+POST+PATCH+DELETE
/DefaultCollection/*/_apis/build/qualities#GET+PUT+DELETE
/DefaultCollection/*/_apis/build/tags#GET
/DefaultCollection/*/_apis/build/options#GET
/DefaultCollection/_apis/build/queues#GET
/DefaultCollection/_apis/build/options#GET
/DefaultCollection/_apis/build/controllers#GET
/_apis/accounts
/_apis/profile/profiles
/_apis/projectCollections
/_apis/tagging#GET+POST+PATCH+DELETE
/DefaultCollection/_apis/projects#GET+POST+PATCH+DELETE
/DefaultCollection/_apis/tagging#GET+POST+PATCH+DELETE
/_apis/notifications/*/eventdefinitions
/_apis/hooks/consumers
/_apis/hooks/publishers
/_apis/hooks/subscriptions#GET+POST+PUT+DELETE
/_apis/hooks/inputValuesQuery#POST
/_apis/hooks/notificationsQuery#POST
/_apis/hooks/subscriptionsQuery#POST
/_apis/hooks/publishersQuery#POST
/DefaultCollection/_apis/hooks/consumers
/DefaultCollection/_apis/hooks/publishers
/DefaultCollection/_apis/hooks/subscriptions#GET+POST+PUT+DELETE
/DefaultCollection/_apis/hooks/inputValuesQuery#POST
/DefaultCollection/_apis/hooks/notificationsQuery#POST
/DefaultCollection/_apis/hooks/subscriptionsQuery#POST
/DefaultCollection/_apis/hooks/publishersQuery#POST
/_apis/chat/rooms/*/messages#GET+POST+PUT+PATCH+DELETE
/_apis/chat/rooms#GET+POST+PUT+PATCH+DELETE
/DefaultCollection/_apis/chat/rooms/*/messages#GET+POST+PUT+PATCH+DELETE
/DefaultCollection/_apis/chat/rooms#GET+POST+PUT+PATCH+DELETE
/_apis/tfvc/branches
/_apis/tfvc/changesets
/_apis/tfvc/labels
/_apis/tfvc/shelvesets
/_apis/tfvc/workspaces#GET+POST
/_apis/tfvc/changesetsBatch#POST
/_apis/tfvc/itemBatch#POST
/DefaultCollection/_apis/tfvc/branches
/DefaultCollection/_apis/tfvc/changesets
/DefaultCollection/_apis/tfvc/items
/DefaultCollection/_apis/tfvc/labels
/DefaultCollection/_apis/tfvc/shelvesets
/DefaultCollection/_apis/tfvc/workspaces#GET+POST
/DefaultCollection/_apis/tfvc/changesetsBatch#POST
/DefaultCollection/_apis/tfvc/itemBatch#POST
/DefaultCollection/*/_apis/tfvc#GET+POST
/_apis/git/repositories#GET+POST
/_apis/git/repositories/*/commits
/_apis/git/*/repositories/*/commits
/_apis/git/repositories/*/commits/*/statuses#GET+POST
/_apis/git/*/repositories/*/commits/*/statuses#GET+POST
/_apis/git/repositories/*/pushes#GET+POST
/_apis/git/*/repositories/*/pushes#GET+POST
/_apis/git/repositories/*/pushes/*
/_apis/git/*/repositories/*/pushes/*
/_apis/git/repositories/*#GET+PATCH+DELETE
/_apis/git/*/repositories/*#GET+PATCH+DELETE
/_apis/git/*/repositories#GET+POST
/DefaultCollection/_apis/git/repositories#GET+POST
/DefaultCollection/_apis/git/repositories/*/commits
/DefaultCollection/_apis/git/*/repositories/*/commits
/DefaultCollection/_apis/git/repositories/*/commits/*/statuses#GET+POST
/DefaultCollection/_apis/git/*/repositories/*/commits/*/statuses#GET+POST
/DefaultCollection/_apis/git/repositories/*/pushes#GET+POST
/DefaultCollection/_apis/git/*/repositories/*/pushes#GET+POST
/DefaultCollection/_apis/git/repositories/*/pushes/*
/DefaultCollection/_apis/git/*/repositories/*/pushes/*
/DefaultCollection/_apis/git/repositories/*#GET+PATCH+DELETE+POST
/DefaultCollection/_apis/git/*/repositories/*#GET+PATCH+DELETE+POST
/DefaultCollection/_apis/git/*/repositories#GET+POST
/DefaultCollection/_apis/git/repositories/*/pullrequests#GET+POST+PUT+PATCH+DELETE
/DefaultCollection/_apis/git/*/repositories/*/pullrequests#GET+POST+PUT+PATCH+DELETE
/DefaultCollection/*/_apis/git/repositories#GET+POST+PUT+PATCH+DELETE
/DefaultCollection/_apis/codereview/reviews#GET
/DefaultCollection/*/_apis/codereview/reviews#GET+POST+PUT+PATCH+DELETE
/DefaultCollection/*/_apis/codereview/reviewsbatch#POST
/DefaultCollection/*/_apis/codereview/settings#GET+POST+PUT
/DefaultCollection/_apis/visits/artifactVisits#PUT
/DefaultCollection/_apis/visits/artifactVisitsBatch#POST
/DefaultCollection/_apis/visits/artifactStatsBatch#POST
/DefaultCollection/*/_apis/policy/Evaluations#GET+PATCH
/_apis/wit/attachments#GET+POST
/_apis/wit/queries#GET+POST+PATCH+DELETE
/DefaultCollection/_apis/wit/attachments#GET+POST
/DefaultCollection/_apis/wit/queries#GET+POST+PATCH+DELETE
/DefaultCollection/*/*/_apis/wit/queries#GET+POST+PATCH+DELETE
/_apis/wit/fields#GET
/_apis/wit/wiql#GET+POST
/_apis/wit/workitemrelationtypes#GET
/_apis/wit/workitems#GET+POST+PATCH
/_apis/wit/workitemtypecategories#GET
/_apis/wit/workitemtypes#GET
/_apis/wit/$ruleEngine#POST
/_apis/wit/$batch#POST
/_apis/wit/artifactlinktypes#GET
/_apis/wit/artifacturiquery#POST
/DefaultCollection/_apis/wit/artifactlinktypes#GET
/DefaultCollection/_apis/wit/artifacturiquery#POST
/DefaultCollection/_apis/wit/fields#GET
/DefaultCollection/_apis/wit/wiql#GET+POST
/DefaultCollection/_apis/wit/workitemrelationtypes#GET
/DefaultCollection/_apis/wit/workitems#GET+POST+PATCH+DELETE
/DefaultCollection/_apis/wit/$ruleEngine#POST
/DefaultCollection/_apis/wit/$batch#POST
/DefaultCollection/_apis/wit/workitemtypetemplate#GET+POST
/DefaultCollection/*/_apis/wit/fields#GET
/DefaultCollection/*/_apis/wit/classificationnodes#GET+POST+PATCH+DELETE
/DefaultCollection/*/_apis/wit/queries#GET+POST+PATCH+DELETE
/DefaultCollection/*/_apis/wit/wiql#GET+POST
/DefaultCollection/*/_apis/wit/workitems#GET+PATCH+DELETE
/DefaultCollection/*/_apis/wit/workitems#GET+POST+PATCH+DELETE
/DefaultCollection/*/_apis/wit/workitemtypecategories#GET
/DefaultCollection/*/_apis/wit/workitemtypes#GET
/DefaultCollection/*/_apis/wit/workitemtypetemplate#GET+POST
/DefaultCollection/*/*/_apis/wit/templates#GET+PUT+POST+DELETE
/DefaultCollection/*/*/_apis/wit/queries#GET+POST+PATCH+DELETE
/DefaultCollection/*/*/_apis/wit/wiql#GET+POST
/DefaultCollection/_apis/resources/Containers/*
/_apis/resources/Containers/*
/_api/_wit/teamProjects
/DefaultCollection/_api/_wit/teamProjects
/DefaultCollection/*/_apis/work/boards#GET+PUT+PATCH
/DefaultCollection/*/*/_apis/work/boards#GET+PUT+PATCH
/DefaultCollection/*/_apis/work/teamsettings#GET+POST+PATCH+DELETE
/DefaultCollection/*/*/_apis/work/teamsettings#GET+POST+PATCH+DELETE+PUT
/DefaultCollection/*/_apis/work/processconfiguration#GET
/DefaultCollection/*/*/_apis/work/backlogconfiguration#GET
/_apis/clt/testdrops#GET+POST
/_apis/clt/testruns#GET+POST+PATCH
/_apis/clt/testruns/*/errors
/_apis/clt/testruns/*/messages
/_apis/clt/testruns/*/results
/_apis/clt/testruns/*/counterinstances
/_apis/clt/testruns/*/countersamples
/_apis/clt/apm
/_apis/clt/configuration
/_apis/clt/agentgroups#GET+POST+PATCH+DELETE
/_apis/clt/agentgroups/*/agents#GET+POST+PATCH+DELETE
/DefaultCollection/*/_apis/test#GET+POST+PATCH+DELETE
/_apis/test/suites
/_apis/Identities#GET+PUT+DELETE
/_apis/IdentityBatch#POST
/_apis/Groups#GET+DELETE+POST
/_apis/Scopes#GET+PUT+PATCH+DELETE
/DefaultCollection/_apis/discussion/threads#GET+POST+PATCH+DELETE
/DefaultCollection/_apis/discussion/threadsBatch#POST
/DefaultCollection/_apis/discussion/comments#PATCH
/_apis/Commerce/*#GET
/_apis/Commerce/Subscription/*/*#GET+PUT
/_apis/gallery/*#GET
/_apis/gallery/acquisitionrequests/*#POST

vso.base

/_apis#OPTIONS
/DefaultCollection/_apis#OPTIONS
/_apis/connectiondata#GET
/DefaultCollection/_apis/connectiondata#GET
/_apis/ServiceDefinitions#GET
/_apis/resourceareas#GET
/DefaultCollection/_apis/resourceareas#GET
/_apis/operations#GET
/DefaultCollection/_apis/operations#GET
/_apis/permissions#GET
/_apis/SecurityNamespaces#GET
/_apis/AccessControlLists#GET
/_apis/security/permissionEvaluationBatch#POST
/DefaultCollection/_apis/permissions#GET
/DefaultCollection/_apis/SecurityNamespaces#GET
/DefaultCollection/_apis/AccessControlLists#GET
/DefaultCollection/_apis/security/permissionEvaluationBatch#POST

vso.profile

/_apis/account#GET
/_apis/account/regions#GET
/_apis/accounts#GET
/_apis/projectCollections#GET
/_apis/profile/profiles#GET
/_apis/profile/UserDefaults#GET
/_apis/profile/regions#GET
/_apis/profile/georegion#GET
/_apis/profile/Locations#GET
/_apis/profile/Settings#GET
/_apis/profile/Attributes#GET+PATCH
/_apis/ClientNotification/Subscriptions#GET
/_apis/process/processes#GET
/DefaultCollection/_apis/projects#GET
/DefaultCollection/_apis#OPTIONS
/_apis/Organization/Regions#GET

vso.profile_write

/_apis/profile/profiles#PATCH+PUT

vso.acquisition_write

/*/_apis/ServiceDefinitions#GET
/*/_apis/projectCollections#GET
/*/_apis/projects#GET+POST
/*/_apis/operations#GET
/_apis/ServiceDefinitions#GET
/_apis/projects#GET+POST
/_apis/operations#GET
/_apis/profile/avatar#GET+POST+DELETE+PUT
/_apis/profile/profiles#GET+POST+PATCH
/_apis/profile/UserDefaults#GET+PUT
/_apis/accounts#GET+POST
/api/account#GET+POST
/_apis/delegatedauth/registration#GET
/_apis/delegatedauth/registrationsecret#GET
/_apis/delegatedauth/authorizations#GET
/_apis/UserMapping/UserAccountMappings#GET

vso.identity

/*/_apis/identities#GET
/*/_apis/groups#GET
/*/_apis/scopes#GET
/*/_apis/identitybatch#POST
/_apis/identities#GET
/_apis/groups#GET
/_apis/scopes#GET
/_apis/identitybatch#POST
/DefaultCollection/_apis/identities#GET
/DefaultCollection/_apis/groups#GET
/DefaultCollection/_apis/scopes#GET
/DefaultCollection/_apis/identitybatch#POST

vso.identity_manage

/_apis/identities#GET+POST+PUT+DELETE
/_apis/groups#GET+POST+PUT+DELETE
/_apis/scopes#GET+POST+PUT+DELETE+PATCH
/DefaultCollection/_apis/identities#GET+POST+PUT+DELETE
/DefaultCollection/_apis/groups#GET+POST+PUT+DELETE
/DefaultCollection/_apis/scopes#GET+POST+PUT+DELETE+PATCH

vso.hooks

/_apis/hooks/consumers#GET
/_apis/hooks/inputValuesQuery#POST
/_apis/hooks/notificationsQuery#POST
/_apis/hooks/publishers#GET
/_apis/hooks/publishersQuery#POST
/_apis/hooks/subscriptions#GET
/_apis/hooks/subscriptionsQuery#POST
/_apis/hooks/testNotifications#POST
/DefaultCollection/_apis/hooks/consumers#GET
/DefaultCollection/_apis/hooks/inputValuesQuery#POST
/DefaultCollection/_apis/hooks/notificationsQuery#POST
/DefaultCollection/_apis/hooks/publishers#GET
/DefaultCollection/_apis/hooks/publishersQuery#POST
/DefaultCollection/_apis/hooks/subscriptions#GET
/DefaultCollection/_apis/hooks/subscriptionsQuery#POST
/DefaultCollection/_apis/hooks/testNotifications#POST

vso.hooks_write

/_apis/hooks/subscriptions#GET+POST+PUT+DELETE
/DefaultCollection/_apis/hooks/subscriptions#GET+POST+PUT+DELETE

vso.hooks_interact

/DefaultCollection/_apis/wit/workitems#PATCH
/DefaultCollection/*/_apis/wit/workitemtypes/*/states#GET

vso.work

/_apis/tagging#GET
/DefaultCollection/_apis/tagging#GET
/DefaultCollection/_apis/wit/attachments#GET
/DefaultCollection/_apis/wit/fields#GET
/DefaultCollection/_apis/wit/workitemrelationtypes#GET
/DefaultCollection/_apis/wit/queries#GET
/DefaultCollection/_apis/wit/wiql#GET+POST
/DefaultCollection/_apis/wit/workitems#GET
/DefaultCollection/*/_apis/wit/fields#GET
/DefaultCollection/*/_apis/wit/classificationnodes#GET
/DefaultCollection/*/_apis/wit/queries#GET
/DefaultCollection/*/_apis/wit/wiql#GET+POST
/DefaultCollection/*/_apis/wit/workitemtypecategories#GET
/DefaultCollection/*/_apis/wit/workitemtypes#GET
/DefaultCollection/*/_apis/wit/workitemtypetemplate#GET
/DefaultCollection/*/_apis/wit/workitems#GET
/DefaultCollection/*/*/_apis/wit/queries#GET
/DefaultCollection/*/*/_apis/wit/wiql#GET+POST
/DefaultCollection/*/*/_apis/wit/templates#GET
/DefaultCollection/_apis/wit/workitemtypetemplate#GET
/DefaultCollection/_apis/wit/$ruleEngine#POST
/DefaultCollection/*/_apis/work/boards#GET
/DefaultCollection/*/*/_apis/work/boards#GET
/DefaultCollection/*/_apis/work/teamsettings#GET
/DefaultCollection/*/*/_apis/work/teamsettings#GET
/DefaultCollection/*/_apis/work/processconfiguration#GET
/DefaultCollection/*/*/_apis/work/backlogconfiguration#GET
/DefaultCollection/_apis/work/boardcolumns#GET
/DefaultCollection/*/_apis/work/boardcolumns#GET
/DefaultCollection/_apis/work/boardrows#GET
/DefaultCollection/*/_apis/work/boardrows#GET
/DefaultCollection/_apis/wit/reporting/workItemRevisions#GET+POST
/DefaultCollection/*/_apis/wit/reporting/workItemRevisions#GET+POST
/DefaultCollection/_apis/wit/reporting/workItemLinks#GET
/DefaultCollection/*/_apis/wit/reporting/workItemLinks#GET
/DefaultCollection/_apis/process/processes#GET
/DefaultCollection/_apis/wit/artifactlinktypes#GET
/DefaultCollection/_apis/wit/artifacturiquery#POST

vso.work_write

/_apis/tagging#GET+POST+PATCH+DELETE
/DefaultCollection/_apis/wit/attachments#GET+POST+PUT
/DefaultCollection/*/_apis/wit/classificationnodes#GET+POST+DELETE+PATCH
/DefaultCollection/_apis/wit/queries#GET+POST+PATCH+DELETE
/DefaultCollection/*/_apis/wit/queries#GET+POST+PATCH+DELETE
/DefaultCollection/*/*/_apis/wit/queries#GET+POST+PATCH+DELETE
/DefaultCollection/_apis/wit/workitems#GET+POST+PATCH+DELETE
/DefaultCollection/_apis/wit/recyclebin#GET+PATCH+DELETE
/DefaultCollection/_apis/tagging#GET+POST+PATCH+DELETE
/DefaultCollection/*/_apis/wit/workitems#PATCH
/DefaultCollection/_apis/tagging#GET+POST+PATCH+DELETE
/DefaultCollection/*/_apis/work/boards#GET+PUT+PATCH
/DefaultCollection/*/*/_apis/work/boards#GET+PUT+PATCH
/DefaultCollection/*/_apis/wit/workitems#GET+POST+PATCH+DELETE
/DefaultCollection/*/_apis/wit/recyclebin#GET+PATCH+DELETE
/DefaultCollection/_apis/wit/$batch#POST
/DefaultCollection/*/_apis/work/teamsettings#GET+POST+PATCH+DELETE+PUT
/DefaultCollection/*/*/_apis/work/teamsettings#GET+POST+PATCH+DELETE+PUT
/DefaultCollection/*/_apis/wit/workitemtypetemplate#GET+POST
/DefaultCollection/_apis/wit/workitemtypetemplate#GET+POST
/DefaultCollection/*/*/_apis/wit/templates#GET+PUT+POST+DELETE

vso.build

/DefaultCollection/_apis/resources/Containers#GET
/DefaultCollection/*/_apis/build/builds#GET
/DefaultCollection/*/_apis/build/definitions#GET
/DefaultCollection/*/_apis/build/requests#GET
/DefaultCollection/*/_apis/build/qualities#GET
/DefaultCollection/*/_apis/build/tags#GET
/DefaultCollection/*/_apis/build/options#GET
/DefaultCollection/*/_apis/build/repos#GET
/DefaultCollection/_apis/build/builds#GET
/DefaultCollection/_apis/build/queues#GET
/DefaultCollection/_apis/build/options#GET
/DefaultCollection/_apis/build/controllers#GET
/DefaultCollection/*/_apis/distributedtask/hubs/build/plans#GET

vso.build_execute

/DefaultCollection/*/_apis/build/builds#GET+PATCH+DELETE+PUT+POST
/DefaultCollection/*/_apis/build/requests#GET+POST+PATCH+DELETE
/DefaultCollection/*/_apis/build/qualities#GET+PUT+DELETE
/DefaultCollection/*/_apis/build/definitions#GET+POST+PUT+DELETE
/DefaultCollection/_apis/build/builds#GET+PATCH+DELETE+PUT+POST
/DefaultCollection/_apis/build/queues#GET+POST+DELETE
/DefaultCollection/*/_apis/distributedtask/hubs/build/plans#GET+PUT

vso.code

/DefaultCollection/_apis/tfvc/branches#GET
/DefaultCollection/*/_apis/tfvc/branches#GET
/DefaultCollection/_apis/tfvc/changesets#GET
/DefaultCollection/*/_apis/tfvc/changesets#GET
/DefaultCollection/_apis/tfvc/changesetsBatch#POST
/DefaultCollection/_apis/tfvc/labels#GET
/DefaultCollection/*/_apis/tfvc/labels#GET
/DefaultCollection/_apis/tfvc/labelItems#GET
/DefaultCollection/_apis/tfvc/shelvesets#GET
/DefaultCollection/_apis/tfvc/items#GET
/DefaultCollection/*/_apis/tfvc/items#GET
/DefaultCollection/_apis/tfvc/itemBatch#POST
/DefaultCollection/*/_apis/tfvc/itemBatch#POST
/DefaultCollection/*/*/_git/*#GET
/DefaultCollection/*/_git/*#GET
/DefaultCollection/_git/*#GET
/DefaultCollection/*/*/_git/_full/*#GET
/DefaultCollection/*/_git/_full/*#GET
/DefaultCollection/_git/_full/*#GET
/DefaultCollection/*/*/_git/_optimized/*#GET
/DefaultCollection/*/_git/_optimized/*#GET
/DefaultCollection/_git/_optimized/*#GET
/DefaultCollection/*/*/_git/*/git-upload-pack#POST
/DefaultCollection/*/_git/*/git-upload-pack#POST
/DefaultCollection/_git/*/git-upload-pack#POST
/DefaultCollection/*/*/_git/_full/*/git-upload-pack#POST
/DefaultCollection/*/_git/_full/*/git-upload-pack#POST
/DefaultCollection/_git/_full/*/git-upload-pack#POST
/DefaultCollection/*/*/_git/_optimized/*/git-upload-pack#POST
/DefaultCollection/*/_git/_optimized/*/git-upload-pack#POST
/DefaultCollection/_git/_optimized/*/git-upload-pack#POST
/DefaultCollection/*/*/_git/*/info/lfs/objects#POST
/DefaultCollection/*/_git/*/info/lfs/objects#POST
/DefaultCollection/_git/*/info/lfs/objects#POST
/DefaultCollection/*/*/_git/_full/*/info/lfs/objects#POST
/DefaultCollection/*/_git/_full/*/info/lfs/objects#POST
/DefaultCollection/_git/_full/*/info/lfs/objects#POST
/DefaultCollection/*/*/_git/_optimized/*/info/lfs/objects#POST
/DefaultCollection/*/_git/_optimized/*/info/lfs/objects#POST
/DefaultCollection/_git/_optimized/*/info/lfs/objects#POST
/DefaultCollection/*/*/_git/*/gvfs/*#POST
/DefaultCollection/*/_git/*/gvfs/*#POST
/DefaultCollection/_git/*/gvfs/*#POST
/DefaultCollection/*/*/_git/_full/*/gvfs/*#POST
/DefaultCollection/*/_git/_full/*/gvfs/*#POST
/DefaultCollection/_git/_full/*/gvfs/*#POST
/DefaultCollection/*/*/_git/_optimized/*/gvfs/*#POST
/DefaultCollection/*/_git/_optimized/*/gvfs/*#POST
/DefaultCollection/_git/_optimized/*/gvfs/*#POST
/DefaultCollection/*/_apis/git/*/repositories#GET
/DefaultCollection/*/_apis/git/*/repositories/*/blobs#GET
/DefaultCollection/*/_apis/git/*/repositories/*/commits
/DefaultCollection/*/_apis/git/*/repositories/*/commits/*/statuses#GET
/DefaultCollection/*/_apis/git/*/repositories/*/commitsBatch#POST
/DefaultCollection/*/_apis/git/*/repositories/*/diffs/commits#GET
/DefaultCollection/*/_apis/git/*/repositories/*/items#GET
/DefaultCollection/*/_apis/git/*/repositories/*/itemsBatch#POST
/DefaultCollection/*/_apis/git/*/repositories/*/filepaths#GET
/DefaultCollection/*/_apis/git/*/repositories/*/pullrequests#GET
/DefaultCollection/*/_apis/git/*/repositories/*/pullrequestquery#POST
/DefaultCollection/*/_apis/git/*/repositories/*/pushes#GET
/DefaultCollection/*/_apis/git/*/repositories/*/refs#GET
/DefaultCollection/*/_apis/git/*/repositories/*/stats/branches#GET
/DefaultCollection/*/_apis/git/*/repositories/*/trees#GET
/DefaultCollection/*/_apis/git/favorites/refs#GET
/DefaultCollection/*/_apis/git/favorites/refs#POST
/DefaultCollection/*/_apis/git/favorites/refs#PUT
/DefaultCollection/*/_apis/git/repositories#GET
/DefaultCollection/*/_apis/git/repositories/*/blobs#GET
/DefaultCollection/*/_apis/git/repositories/*/commits
/DefaultCollection/*/_apis/git/repositories/*/commits/*/statuses#GET
/DefaultCollection/*/_apis/git/repositories/*/commitsBatch#POST
/DefaultCollection/*/_apis/git/repositories/*/diffs/commits#GET
/DefaultCollection/*/_apis/git/repositories/*/items#GET
/DefaultCollection/*/_apis/git/repositories/*/itemsBatch#POST
/DefaultCollection/*/_apis/git/repositories/*/filepaths#GET
/DefaultCollection/*/_apis/git/repositories/*/pullrequests#GET
/DefaultCollection/*/_apis/git/repositories/*/pullrequestquery#POST
/DefaultCollection/*/_apis/git/repositories/*/pushes#GET
/DefaultCollection/*/_apis/git/repositories/*/refs#GET
/DefaultCollection/*/_apis/git/repositories/*/stats/branches#GET
/DefaultCollection/*/_apis/git/repositories/*/trees#GET
/DefaultCollection/*/_apis/git/repositories/*/limitedRefCriteria#GET
/DefaultCollection/*/_apis/git/*/repositories/*/objects#GET
/DefaultCollection/*/_apis/git/repositories/*/objects#GET
/DefaultCollection/_apis/git/*/repositories#GET
/DefaultCollection/_apis/git/*/repositories/*/blobs#GET
/DefaultCollection/_apis/git/*/repositories/*/commits
/DefaultCollection/_apis/git/*/repositories/*/commits/*/statuses#GET
/DefaultCollection/_apis/git/*/repositories/*/commitsBatch#POST
/DefaultCollection/_apis/git/*/repositories/*/diffs/commits#GET
/DefaultCollection/_apis/git/*/repositories/*/items#GET
/DefaultCollection/_apis/git/*/repositories/*/itemsBatch#POST
/DefaultCollection/_apis/git/*/repositories/*/filepaths#GET
/DefaultCollection/_apis/git/*/repositories/*/pullrequests#GET
/DefaultCollection/_apis/git/*/repositories/*/pullrequestquery#POST
/DefaultCollection/_apis/git/*/repositories/*/pushes#GET
/DefaultCollection/_apis/git/*/repositories/*/refs#GET
/DefaultCollection/_apis/git/*/repositories/*/stats/branches#GET
/DefaultCollection/_apis/git/*/repositories/*/trees#GET
/DefaultCollection/_apis/git/repositories#GET
/DefaultCollection/_apis/git/repositories/*/blobs#GET
/DefaultCollection/_apis/git/repositories/*/commits
/DefaultCollection/_apis/git/repositories/*/commits/*/statuses#GET
/DefaultCollection/_apis/git/repositories/*/commitsBatch#POST
/DefaultCollection/_apis/git/repositories/*/diffs/commits#GET
/DefaultCollection/_apis/git/repositories/*/items#GET
/DefaultCollection/_apis/git/repositories/*/itemsBatch#POST
/DefaultCollection/_apis/git/repositories/*/filepaths#GET
/DefaultCollection/_apis/git/repositories/*/pullrequests#GET
/DefaultCollection/_apis/git/repositories/*/pullrequestquery#POST
/DefaultCollection/_apis/git/repositories/*/pushes#GET
/DefaultCollection/_apis/git/repositories/*/refs#GET
/DefaultCollection/_apis/git/repositories/*/stats/branches#GET
/DefaultCollection/_apis/git/repositories/*/trees#GET
/DefaultCollection/_apis/git/repositories/*/limitedRefCriteria#GET
/DefaultCollection/_apis/git/*/repositories/*/objects#GET
/DefaultCollection/_apis/git/repositories/*/objects#GET
/DefaultCollection/*/_apis/git/pullRequests#GET
/DefaultCollection/_apis/codereview/reviews#GET
/DefaultCollection/*/_apis/codereview/reviews#GET
/DefaultCollection/*/_apis/codereview/reviewsbatch#POST
/DefaultCollection/*/_apis/codereview/settings#GET
/DefaultCollection/_apis/visits/artifactVisitsBatch#POST
/DefaultCollection/_apis/visits/artifactStatsBatch#POST
/DefaultCollection/*/_apis/policy/Evaluations#GET

vso.code_write

/DefaultCollection/_apis/tfvc/changesets#GET+POST
/DefaultCollection/*/_apis/tfvc/changesets#GET+POST
/DefaultCollection/*/*/_git/*#POST+PUT+PATCH+DELETE
/DefaultCollection/*/_git/*#POST+PUT+PATCH+DELETE
/DefaultCollection/_git/*#POST+PUT+PATCH+DELETE
/DefaultCollection/*/*/_git/_full/*#POST+PUT+PATCH+DELETE
/DefaultCollection/*/_git/_full/*#POST+PUT+PATCH+DELETE
/DefaultCollection/_git/_full/*#POST+PUT+PATCH+DELETE
/DefaultCollection/*/*/_git/_optimized/*#POST+PUT+PATCH+DELETE
/DefaultCollection/*/_git/_optimized/*#POST+PUT+PATCH+DELETE
/DefaultCollection/_git/_optimized/*#POST+PUT+PATCH+DELETE
/DefaultCollection/*/_apis/git/*/repositories/*/pullrequests#POST+PUT+PATCH+DELETE
/DefaultCollection/*/_apis/git/*/repositories/*/pushes#POST
/DefaultCollection/*/_apis/git/*/repositories/*/refs#POST+PUT+PATCH+DELETE
/DefaultCollection/*/_apis/git/*/repositories/*/commits/*/statuses#GET+POST
/DefaultCollection/*/_apis/git/repositories/*/pullrequests#POST+PUT+PATCH+DELETE
/DefaultCollection/*/_apis/git/repositories/*/pushes#POST
/DefaultCollection/*/_apis/git/repositories/*/refs#POST+PUT+PATCH+DELETE
/DefaultCollection/*/_apis/git/repositories/*/commits/*/statuses#GET+POST
/DefaultCollection/*/_apis/git/*/repositories/*/objects#PUT
/DefaultCollection/*/_apis/git/repositories/*/objects#PUT
/DefaultCollection/_apis/git/*/repositories/*/pullrequests#POST+PUT+PATCH+DELETE
/DefaultCollection/_apis/git/*/repositories/*/pushes#POST
/DefaultCollection/_apis/git/*/repositories/*/refs#POST+PUT+PATCH+DELETE
/DefaultCollection/_apis/git/*/repositories/*/commits/*/statuses#GET+POST
/DefaultCollection/_apis/git/repositories/*/pullrequests#POST+PUT+PATCH+DELETE
/DefaultCollection/_apis/git/repositories/*/pushes#POST
/DefaultCollection/_apis/git/repositories/*/refs#POST+PUT+PATCH+DELETE
/DefaultCollection/_apis/git/repositories/*/commits/*/statuses#GET+POST
/DefaultCollection/_apis/git/*/repositories/*/objects#PUT
/DefaultCollection/_apis/git/repositories/*/objects#PUT
/DefaultCollection/*/_apis/codereview/reviews#POST+PUT+PATCH+DELETE
/DefaultCollection/*/_apis/codereview/settings#POST+PUT
/DefaultCollection/_apis/visits/artifactVisits#PUT
/DefaultCollection/*/_apis/policy/Evaluations#PATCH

vso.code_manage

/DefaultCollection/*/_apis/git/repositories#POST+PATCH+DELETE
/DefaultCollection/*/_apis/git/*/repositories#POST+PATCH+DELETE
/DefaultCollection/*/_apis/git/repositories/*/limitedRefCriteria#PUT
/DefaultCollection/_apis/git/repositories#POST+PATCH+DELETE
/DefaultCollection/_apis/git/*/repositories#POST+PATCH+DELETE
/DefaultCollection/_apis/git/repositories/*/limitedRefCriteria#PUT

vso.code_status

/DefaultCollection/_apis/git/repositories/*/commits/*/statuses#GET+POST
/DefaultCollection/*/_apis/git/repositories/*/commits/*/statuses#GET+POST
/DefaultCollection/_apis/git/repositories/*/pullrequests/*/statuses#GET+POST
/DefaultCollection/*/_apis/git/repositories/*/pullrequests/*/statuses#GET+POST
/DefaultCollection/_apis/git/repositories/*/pullrequests/*/iterations/*/statuses#GET+POST
/DefaultCollection/*/_apis/git/repositories/*/pullrequests/*/iterations/*/statuses#GET+POST

vso.chat_write

/DefaultCollection/_apis/chat/rooms#GET
/DefaultCollection/_apis/chat/rooms/*/messages#GET+POST+PATCH+DELETE
/DefaultCollection/_apis/chat/rooms/*/users#GET+PUT+DELETE

vso.chat_manage

/DefaultCollection/_apis/chat/rooms#GET+POST+PATCH+PUT+DELETE

vso.agentpools

/_apis/distributedtask/packages/agent#GET
/_apis/distributedtask/pools#GET
/_apis/distributedtask/pools/*/agents#GET
/_apis/distributedtask/pools/*/jobrequests#GET
/_apis/distributedtask/queues#GET
/_apis/distributedtask/tasks#GET
/DefaultCollection/_apis/distributedtask/packages/agent#GET
/DefaultCollection/_apis/distributedtask/pools#GET
/DefaultCollection/_apis/distributedtask/pools/*/agents#GET
/DefaultCollection/_apis/distributedtask/pools/*/jobrequests#GET
/DefaultCollection/_apis/distributedtask/queues#GET
/DefaultCollection/*/_apis/distributedtask/queues#GET
/DefaultCollection/_apis/distributedtask/tasks#GET

vso.agentpools_manage

/_apis/distributedtask/packages/agent#GET
/_apis/distributedtask/pools#DELETE+GET+PATCH+POST
/_apis/distributedtask/pools/*/agents#DELETE+GET+PATCH+POST+PUT
/_apis/distributedtask/pools/*/jobrequests#GET
/_apis/distributedtask/queues#DELETE+GET+PATCH+POST+PUT
/_apis/distributedtask/tasks#DELETE+GET+PATCH+POST+PUT
/DefaultCollection/_apis/distributedtask/packages/agent#GET
/DefaultCollection/_apis/distributedtask/pools#DELETE+GET+PATCH+POST
/DefaultCollection/_apis/distributedtask/pools/*/agents#DELETE+GET+PATCH+POST+PUT
/DefaultCollection/_apis/distributedtask/pools/*/jobrequests#GET
/DefaultCollection/_apis/distributedtask/queues#DELETE+GET+PATCH+POST
/DefaultCollection/*/_apis/distributedtask/queues#DELETE+GET+PATCH+POST+PUT
/DefaultCollection/_apis/distributedtask/tasks#DELETE+GET+PATCH+POST+PUT

vso.agentpools_listen

/_apis/distributedtask/pools/*/jobrequests#GET+PATCH+DELETE
/_apis/distributedtask/pools/*/messages#GET+DELETE
/_apis/distributedtask/pools/*/sessions#GET+POST+DELETE
/_apis/distributedtask/pools/*/agents/*/updates#PUT
/DefaultCollection/_apis/distributedtask/pools/*/jobrequests#GET+PATCH+DELETE
/DefaultCollection/_apis/distributedtask/pools/*/messages#GET+DELETE
/DefaultCollection/_apis/distributedtask/pools/*/sessions#GET+POST+DELETE
/DefaultCollection/_apis/distributedtask/pools/*/agents/*/updates#PUT

vso.governance.extension_write

/_apis/governance/components#GET
/_apis/governance/products#GET
/_apis/governance/products/*/registrations/*/policyStatuses#PUT

vso.packaging

/DefaultCollection/_apis/packaging#GET
/DefaultCollection/_packaging#HEAD+GET

vso.packaging_write

/DefaultCollection/_apis/packaging#GET+POST+PUT
/DefaultCollection/_packaging#HEAD+GET+POST+PUT
/DefaultCollection/_packaging/*/nuget/v2#DELETE
/DefaultCollection/_packaging/*/npm#DELETE
/DefaultCollection/_apis/packaging/*/packages/*/versions#DELETE

vso.packaging_manage

/DefaultCollection/_apis/packaging#GET+PATCH+POST+PUT+DELETE
/DefaultCollection/_packaging#HEAD+GET+PATCH+POST+PUT+DELETE

vso.oss

/DefaultCollection/_apis/oss/*#GET

vso.oss_write

/DefaultCollection/_apis/oss/Requests#POST+PUT+PATCH
/DefaultCollection/_apis/oss/Versions#PATCH
/DefaultCollection/_apis/oss/Validation#POST

vso.oss_manage

/DefaultCollection/_apis/oss/*#POST+PUT+PATCH+DELETE

vso.oss.extension_read

/DefaultCollection/_apis/oss/ExtensionData/*#GET

vso.oss.extension_write

/DefaultCollection/_apis/oss/ExtensionData/*#POST+PUT+PATCH+DELETE

vso.test

/DefaultCollection/_apis/test/suites#GET
/DefaultCollection/*/_apis/test/plans#GET
/DefaultCollection/*/_apis/test/runs#GET
/DefaultCollection/*/_apis/test/extensionFields#GET
/DefaultCollection/*/_apis/test/suites#GET
/DefaultCollection/*/_apis/test/results#GET
/DefaultCollection/*/_apis/test/testSettings#GET
/DefaultCollection/*/_apis/test/codeCoverage#GET
/DefaultCollection/*/_apis/test/configurations#GET
/DefaultCollection/*/_apis/test/variables#GET
/DefaultCollection/*/_apis/test/cloneOperation#GET
/DefaultCollection/*/_apis/test/session#GET
/DefaultCollection/*/_apis/test/suiteEntry#GET
/DefaultCollection/*/_apis/test/ResultRetentionSettings#GET
/DefaultCollection/*/_apis/test/ResultSummaryByRelease#GET
/DefaultCollection/*/_apis/test/ResultSummaryByBuild#GET
/DefaultCollection/*/_apis/test/ResultSummaryByRequirement#GET
/DefaultCollection/*/_apis/test/ResultDetailsByRelease#GET
/DefaultCollection/*/_apis/test/ResultDetailsByBuild#GET
/DefaultCollection/*/_apis/test/TestMethods#GET
/DefaultCollection/*/_apis/test/Points#GET
/DefaultCollection/*/*/_apis/test/session#GET

vso.test_write

/DefaultCollection/*/_apis/test/plans#GET+POST+PATCH+DELETE
/DefaultCollection/*/_apis/test/suites#GET+POST+PATCH+DELETE
/DefaultCollection/*/_apis/test/runs#GET+POST+PATCH+DELETE
/DefaultCollection/*/_apis/test/results#GET+POST
/DefaultCollection/*/_apis/test/extensionFields#GET+POST
/DefaultCollection/*/_apis/test/testSettings#GET+POST+DELETE
/DefaultCollection/*/_apis/test/codeCoverage#GET+POST
/DefaultCollection/*/_apis/test/configurations#GET+POST+PATCH+DELETE
/DefaultCollection/*/_apis/test/variables#GET+POST+PATCH+DELETE
/DefaultCollection/*/_apis/test/cloneOperation#GET+POST
/DefaultCollection/*/_apis/test/session#GET+POST+PATCH
/DefaultCollection/*/_apis/test/suiteEntry#GET+PATCH
/DefaultCollection/*/_apis/test/ResultRetentionSettings#GET+PATCH
/DefaultCollection/*/_apis/test/ResultSummaryByRelease#GET+POST
/DefaultCollection/*/_apis/test/ResultSummaryByRequirement#GET+POST
/DefaultCollection/*/_apis/test/TestMethods#GET+POST+DELETE
/DefaultCollection/*/_apis/test/Points#GET+POST+PATCH+DELETE
/DefaultCollection/*/*/_apis/test/session#GET+POST+PATCH

vso.loadtest

/_apis/clt/testdrops
/_apis/clt/testruns
/_apis/clt/testruns/*/errors
/_apis/clt/testruns/*/messages
/_apis/clt/testruns/*/results
/_apis/clt/testruns/*/counterinstances
/_apis/clt/testruns/*/countersamples
/_apis/clt/apm
/_apis/clt/configuration
/_apis/clt/agentgroups
/_apis/clt/agentgroups/*/agents

vso.loadtest_write

/_apis/clt/testdrops#GET+POST
/_apis/clt/testruns#GET+POST+PATCH
/_apis/clt/agentgroups#GET+POST+PATCH+DELETE
/_apis/clt/agentgroups/*/agents#GET+POST+PATCH+DELETE

vso.licensing

/_apis/licensing/clientrights
/_apis/licensing/ExtensionEntitlements/*/*#GET

vso.extension

/_apis/ExtensionManagement/InstalledExtensions#GET
/DefaultCollection/_apis/ExtensionManagement/InstalledExtensions#GET

vso.extension_manage

/_apis/ExtensionManagement/InstalledExtensions#GET+POST+PATCH+DELETE+PUT
/DefaultCollection/_apis/ExtensionManagement/InstalledExtensions#GET+POST+PATCH+DELETE+PUT
/_apis/ExtensionManagement/InstalledExtensionsByName#GET+POST+PATCH+DELETE+PUT
/DefaultCollection/_apis/ExtensionManagement/InstalledExtensionsByName#GET+POST+PATCH+DELETE+PUT
/_apis/ExtensionManagement/RequestedExtensions#GET+POST+PATCH+DELETE+PUT
/DefaultCollection/_apis/ExtensionManagement/RequestedExtensions#GET+POST+PATCH+DELETE+PUT
/_apis/ExtensionManagement/AcquisitionOptions#GET
/DefaultCollection/_apis/ExtensionManagement/AcquisitionOptions#GET
/_apis/ExtensionManagement/AcquisitionRequests#POST
/DefaultCollection/_apis/ExtensionManagement/AcquisitionRequests#POST

vso.extension.data

/_apis/ExtensionManagement/InstalledExtensions/*/Data#GET
/DefaultCollection/_apis/ExtensionManagement/InstalledExtensions/*/Data#GET
/_apis/ExtensionManagement/InstalledExtensions/*/*/Data#GET
/DefaultCollection/_apis/ExtensionManagement/InstalledExtensions/*/*/Data#GET
/_apis/Contribution/InstalledApps#GET
/DefaultCollection/_apis/Contribution/InstalledApps#GET
/_apis/ExtensionManagement/InstalledExtensions/*/*/ExtensionDataCollectionQuery#POST
/DefaultCollection/_apis/ExtensionManagement/InstalledExtensions/*/*/ExtensionDataCollectionQuery#POST

vso.extension.data_write

/_apis/ExtensionManagement/InstalledExtensions/*/Data#GET+POST+PATCH+DELETE+PUT
/DefaultCollection/_apis/ExtensionManagement/InstalledExtensions/*/Data#GET+POST+PATCH+DELETE+PUT
/_apis/ExtensionManagement/InstalledExtensions/*/*/Data#GET+POST+PATCH+DELETE+PUT
/DefaultCollection/_apis/ExtensionManagement/InstalledExtensions/*/*/Data#GET+POST+PATCH+DELETE+PUT

vso.extension.default

/_apis/Contribution/InstalledApps#GET
/DefaultCollection/_apis/Contribution/InstalledApps#GET
/_apis/Contribution/nodes/query#POST
/DefaultCollection/_apis/Contribution/nodes/query#POST

vso.extension.preview

/_apis/ExtensionManagement/InstalledExtensions/*/Data#GET+POST+PATCH+DELETE+PUT
/DefaultCollection/_apis/ExtensionManagement/InstalledExtensions/*/Data#GET+POST+PATCH+DELETE+PUT

vso.commerce.write

/_apis/Commerce/*#GET+POST+PATCH
/_apis/Commerce/Subscription/*/*#GET+PUT+POST

vso.gallery

/_apis/gallery/publishers#GET
/_apis/gallery/extensions#GET

vso.gallery_acquire

/_apis/gallery/acquisitionrequests#POST
/_apis/gallery/acquisitionoptions#GET+POST

vso.gallery_publish

/_apis/gallery/publishers/*/extensions#POST+PUT+DELETE
/_apis/gallery/publisher/*/extension/*/accountsbyname#POST+DELETE
/_apis/gallery/extensions#POST+PUT+DELETE
/_apis/gallery/extensions/*/accounts#POST+DELETE

vso.gallery_manage

/_apis/gallery/publishers#POST+PUT+DELETE

vso.entitlements

/_apis/licensing/entitlements#GET

preview_msdn_licensing

/_apis/licensing/msdn/me

user_impersonation

/_signedin#GET+POST

tenant_picker

/aad/tenants

signout

/_signout

app_token

/*#*

vso.release

/DefaultCollection/*/_apis/release/definitions#GET
/DefaultCollection/*/_apis/release/definitions/*/revisions#GET
/DefaultCollection/*/_apis/release/releases#GET
/DefaultCollection/*/_apis/release/releases/*/workitems#GET
/DefaultCollection/*/_apis/release/approvals#GET
/DefaultCollection/*/_apis/release/releases/*/manualInterventions#GET
/DefaultCollection/*/_apis/release/deployments#GET+POST
/DefaultCollection/*/_apis/distributedtask/hubs/release/plans#GET

vso.release_execute

/DefaultCollection/*/_apis/release/definitions#GET+POST+PUT
/DefaultCollection/*/_apis/release/definitions/*/revisions#GET
/DefaultCollection/*/_apis/release/releases#GET+POST+PATCH+PUT
/DefaultCollection/*/_apis/release/releases/*/workitems#GET
/DefaultCollection/*/_apis/release/releases/*/environments#PATCH
/DefaultCollection/*/_apis/release/approvals#GET
/DefaultCollection/*/_apis/release/releases/*/manualInterventions#GET
/DefaultCollection/*/_apis/release/deployments#GET+POST

vso.release_manage

/DefaultCollection/*/_apis/release/definitions#GET+POST+PUT+DELETE
/DefaultCollection/*/_apis/release/definitions/*/revisions#GET
/DefaultCollection/*/_apis/release/releases#GET+POST+PATCH+PUT+DELETE
/DefaultCollection/*/_apis/release/releases/*/workitems#GET
/DefaultCollection/*/_apis/release/releases/*/environments#PATCH
/DefaultCollection/*/_apis/release/approvals#GET+PATCH
/DefaultCollection/*/_apis/release/releases/*/manualInterventions#GET+PATCH
/DefaultCollection/*/_apis/release/deployments#GET+POST

vso.release_logs

/DefaultCollection/*/_apis/release/releases/*/logs#GET
/DefaultCollection/*/_apis/release/releases/*/environments/*/tasks/*/logs#GET
/DefaultCollection/*/_apis/release/releases/*/environments/*/deployPhases/*/tasks/*/logs#GET

vso.machinegroup_manage

/DefaultCollection/*/_apis/distributedtask/machinegroups/*#GET+POST+DELETE+PATCH
/DefaultCollection/*/_apis/distributedtask/deploymentgroups/*#GET+POST+DELETE+PATCH+PUT

vso.live_updates

/signalr#GET+POST

vso.taskgroups

/DefaultCollection/*/_apis/distributedtask/taskgroups#GET
/DefaultCollection/*/_apis/distributedtask/taskgroups/*/revisions#GET

vso.taskgroups_add

/DefaultCollection/*/_apis/distributedtask/taskgroups#POST

vso.taskgroups_manage

/DefaultCollection/*/_apis/distributedtask/taskgroups#GET+POST+PUT+DELETE

vso.serviceendpoint

/DefaultCollection/*/_apis/distributedtask/serviceendpoints#GET
/DefaultCollection/_apis/distributedtask/serviceendpointtypes#GET

vso.serviceendpoint_query

/DefaultCollection/*/_apis/distributedtask/serviceendpointproxy#POST

vso.serviceendpoint_manage

/DefaultCollection/*/_apis/distributedtask/serviceendpoints#GET+POST+PUT+DELETE

vso.drop

/DefaultCollection/_apis/drop/client#HEAD
/DefaultCollection/_apis/blob/blobs/*#GET
/DefaultCollection/_apis/blob/blobsbatch#POST
/DefaultCollection/_apis/drop/drop#OPTIONS
/DefaultCollection/_apis/drop/drop/*#GET
/DefaultCollection/_apis/drop/fetch/*#GET+POST
/DefaultCollection/_apis/drop/drops/*#OPTIONS+GET
/DefaultCollection/_apis/drop/manifests/*#OPTIONS+GET

vso.drop_write

/DefaultCollection/_apis/blob/blobs#OPTIONS
/DefaultCollection/_apis/blob/blobs/*#POST
/DefaultCollection/_apis/drop/drop/*#PUT+POST+PATCH
/DefaultCollection/_apis/drop/drops/*#OPTIONS+PUT+POST+PATCH
/DefaultCollection/_apis/drop/manifests/*#OPTIONS+POST

vso.drop_manage

/DefaultCollection/_apis/drop/drop/*#DELETE
/DefaultCollection/_apis/drop/drops/*#DELETE

vso.buildcache

/_apis/buildcache/cachedeterminismguid/*#GET
/_apis/buildcache/contenthashlist#OPTIONS
/_apis/buildcache/contenthashlist/*#GET
/_apis/buildcache/selector#OPTIONS
/_apis/buildcache/selector/*#GET
/_apis/blob/blob/referencesbatch#POST

vso.buildcache_write

/_apis/buildcache/contenthashlist/*#POST
/_apis/buildcache/incorporateStrongFingeprint/*#PUT
/_apis/blob/blobs#OPTIONS
/_apis/blob/blobs/*#POST

vso.authorization_grant

vso.project

/DefaultCollection/_apis/projects#GET

vso.project_write

/DefaultCollection/_apis/projects#PATCH

vso.project_manage

/DefaultCollection/_apis/projects#POST+DELETE

vso.symbols

/DefaultCollection/_apis/symbol/symsrv#OPTIONS
/DefaultCollection/_apis/symbol/symsrv/*#GET
/DefaultCollection/_apis/symbol/debugentries#OPTIONS
/DefaultCollection/_apis/symbol/debugentries/*#GET
/DefaultCollection/_apis/symbol/requests#OPTIONS+GET

vso.symbols_write

/DefaultCollection/_apis/symbol/requests#POST
/DefaultCollection/_apis/symbol/requests/*#POST+PATCH
/DefaultCollection/_apis/blob/blobs#OPTIONS
/DefaultCollection/_apis/blob/blobs/*#POST

vso.symbols_manage

/DefaultCollection/_apis/symbol/requests/*#DELETE

vso.analytics

/DefaultCollection/_odata/*#GET
/DefaultCollection/*/_odata/*#GET

vso.identitypicker

/_apis/IdentityPicker/identities#POST
/_apis/IdentityPicker/identities/*/avatar#GET

vso.dashboards

/DefaultCollection/*/*/_apis/dashboard/dashboards#HEAD+GET
/DefaultCollection/*/*/_apis/dashboard/dashboards/*/widgets#HEAD+GET

vso.dashboards_manage

/DefaultCollection/*/*/_apis/dashboard/dashboards#HEAD+GET+POST+DELETE
/DefaultCollection/*/*/_apis/dashboard/dashboards/*/widgets#HEAD+GET+POST+PUT+PATCH+DELETE

vso.connected_server

/_apis/Commerce/CommercePackage#GET
/_apis/Commerce/CommercePackage/*#GET

vso.notification

/_apis/notification/EventTypes#GET
/_apis/notification/EventTypes/*/fieldValuesQuery#POST
/_apis/notification/Subscriptions#GET
/_apis/notification/SubscriptionQuery#POST
/_apis/notification/Follows#GET
/_apis/notification/SubscriptionTemplates#GET
/_apis/notification/StatisticsQuery#POST
/DefaultCollection/_apis/notification/EventTypes#GET
/DefaultCollection/_apis/notification/EventTypes/*/fieldValuesQuery#POST
/DefaultCollection/_apis/notification/Subscriptions#GET
/DefaultCollection/_apis/notification/SubscriptionQuery#POST
/DefaultCollection/_apis/notification/Follows#GET
/DefaultCollection/_apis/notification/SubscriptionTemplates#GET
/DefaultCollection/_apis/notification/StatisticsQuery#POST

vso.notification_write

/_apis/notification/Subscriptions#GET+PATCH+POST+DELETE+PUT
/DefaultCollection/_apis/notification/Subscriptions#GET+PATCH+POST+DELETE+PUT
/_apis/notification/SubscriptionEvaluationRequest#GET+POST
/DefaultCollection/_apis/notification/SubscriptionEvaluationRequest#GET+POST
/_apis/notification/Follows#GET+POST+DELETE
/DefaultCollection/_apis/notification/Follows#GET+POST+DELETE

vso.notification_manage

/_apis/notification/BatchNotificationOperations#POST
/DefaultCollection/_apis/notification/BatchNotificationOperations#POST

vso.notification_publish

/_apis/notification/Events#POST
/DefaultCollection/_apis/notification/Events#POST

vso.settings

/_apis/Settings/*#GET
/DefaultCollection/_apis/Settings/*#GET

vso.settings_write

/_apis/Settings/*#GET+PUT+PATCH+DELETE
/DefaultCollection/_apis/Settings/*#GET+PUT+PATCH+DELETE

vso.proxy

/Services/v4.0/item.ashx
/Services/v4.0/FileHandlerService.asmx#POST
/TeamFoundation/Administration/v3.0/LocationService.asmx#POST
/Services/v3.0/LocationService.asmx#POST
/DefaultCollection/Services/v4.0/item.ashx
/DefaultCollection/Services/v4.0/FileHandlerService.asmx#POST
/DefaultCollection/Services/v3.0/LocationService.asmx#POST
/*/*/*/_git/*#GET
/*/*/_git/*#GET
/*/_git/*#GET
/*/*/*/_git/_full/*#GET
/*/*/_git/_full/*#GET
/*/_git/_full/*#GET
/*/*/*/_git/*/git-upload-pack#POST
/*/*/_git/*/git-upload-pack#POST
/*/_git/*/git-upload-pack#POST
/*/*/*/_git/_full/*/git-upload-pack#POST
/*/*/_git/_full/*/git-upload-pack#POST
/*/_git/_full/*/git-upload-pack#POST
/*/*/*/_git/*/gvfs/*#POST
/*/*/_git/*/gvfs/*#POST
/*/_git/*/gvfs/*#POST
/*/*/*/_git/_full/*/gvfs/*#POST
/*/*/_git/_full/*/gvfs/*#POST
/*/_git/_full/*/gvfs/*#POST

vso.graph

/_apis/graph/groups/*#GET
/_apis/graph/subjectlookup#POST
/_apis/graph/memberships/*#GET
/_apis/graph/memberships/*/*#GET+HEAD
/_apis/graph/scopes/*#GET
/_apis/graph/users/*#GET
/DefaultCollection/_apis/graph/groups/*#GET
/DefaultCollection/_apis/graph/subjectlookup#POST
/DefaultCollection/_apis/graph/memberships/*#GET
/DefaultCollection/_apis/graph/memberships/*/*#GET+HEAD
/DefaultCollection/_apis/graph/scopes/*#GET
/DefaultCollection/_apis/graph/users/*#GET

vso.graph_write

/_apis/graph/groups/*#POST+PATCH+DELETE
/_apis/graph/memberships/*/*#HEAD+PUT+DELETE
/_apis/graph/users/*#POST+DELETE
/DefaultCollection/_apis/graph/groups/*#POST+PATCH+DELETE
/DefaultCollection/_apis/graph/memberships/*/*#HEAD+PUT+DELETE
/DefaultCollection/_apis/graph/users/*#POST+DELETE

vso.security_manage

/_apis/SecurityNamespaces#POST
/_apis/AccessControlLists#POST+DELETE
/_apis/AccessControlEntries#POST+DELETE
/_apis/Permissions#DELETE
/DefaultCollection/_apis/SecurityNamespaces#POST
/DefaultCollection/_apis/AccessControlLists#POST+DELETE
/DefaultCollection/_apis/AccessControlEntries#POST+DELETE
/DefaultCollection/_apis/Permissions#DELETE

vso.memberEntitlementManagement

/_apis/MemberEntitlements/*#GET
/_apis/MemberEntitlements#GET
/DefaultCollection/_apis/MemberEntitlements/*#GET
/DefaultCollection/_apis/MemberEntitlements#GET

vso.memberEntitlementManagement_write

/_apis/MemberEntitlements/*#PATCH+DELETE
/_apis/MemberEntitlements#POST
/DefaultCollection/_apis/MemberEntitlements/*#PATCH+DELETE
/DefaultCollection/_apis/MemberEntitlements#POST

Rather Technical

Friday, February 16, 2018

All OAuth scopes in TFS

No comments:

Post a Comment