# Assign CIMD user consent scopes **POST /api/cimd/user-consent-scopes** Add scopes to the tenant-level permission ceiling for CIMD clients. Database-backed scopes are referenced by ID; Management API scopes can never be selected. ## Servers - Logto endpoint address.: https://[tenant_id].logto.app (Logto endpoint address.) ## Authentication methods - O auth2 ## Parameters ### Body: application/json (object) - **organizationScopes** (array[string]) - **resourceScopes** (array[string]) - **organizationResourceScopes** (array[string]) - **userScopes** (array[string]) ## Responses ### 201 The scopes were assigned. ### 400 Bad Request ### 401 Unauthorized ### 403 Forbidden ### 422 Some scopes do not exist or are not allowed. [Powered by Bump.sh](https://bump.sh)