Each token should have one associated permission and one or more scopes to be usable.

The permissions and scopes assigned to a token cannot be changed after the token is created. Carefully select these attributes during token creation.

User Tokens

These tokens can make API calls on behalf of a particular user. The user email is fixed while creating the token. The X-Scio-ActAs HTTP header must be empty.

Global Tokens

These tokens can make API calls on behalf of any user in the system. To identify the user for each API call, the X-Scio-ActAs HTTP header must be included, specifying the user’s email address.

Tokens with GLOBAL permissions can only be created by Super Admin users.

Anonymous Tokens

These tokens can make API calls on behalf of an anonymous user. The X-Scio-ActAs HTTP header must be empty.

ANONYMOUS permissions are supported only for a few endpoints as of now. Please contact Glean support if you’re interested to use such tokens.


Scopes

Scopes define the endpoints that are available to a token. When you create a token, you will select the permission and scope(s) in the “Add Client API Token” dialogue box as described in the token creation steps.

A client API token can have one or more of the following scopes:

ScopeDescription
ACTIVITYCan access datasource user activity collection endpoints.
ANNOUNCEMENTSCan access Glean Announcements related endpoints.
ANSWERSCan access Glean Answers related endpoints.
CHATCan access GleanChat related endpoints.
COLLECTIONSCan access Glean Collections related endpoints.
DOC_PERMISSIONSCan access the Glean Document Permissions related endpoints.
DOCUMENTSCan access endpoints related to Glean documents.
ENTITIESCan access endpoints related to entities.
FEEDCan access Glean Feed related endpoints.
FEEDBACKCan access user feedback related endpoints.
INSIGHTSCan access insights related endpoints.
PEOPLECan access Glean people related endpoints.
PINSCan access Glean pins related endpoints.
SEARCHCan access endpoints related to search queries and autocomplete.
SHORTCUTSCan access shortcuts feature (aka GoLinks) related endpoints.
SUMMARIZECan access AI summary related endpoints.
VERIFICATIONCan access endpoints related to document verification feature.