Answer
Roles: Broad user categories.
Scopes: Fine-grained permissions such as read:orders.
Quick Answer
Roles: coarse-grained groups (Admin, User, Manager) assigned to users. Scopes in OAuth2: specific permissions requested by a client app for what it can do with the API (read:orders, write:products). Roles are about who the user is. Scopes are about what the client application is allowed to do. An API might check both: user must have Admin role AND client must have write scope.
S
SugharaIQ Editorial Team
Verified Answer
This answer has been peer-reviewed by industry experts holding senior engineering roles to ensure technical accuracy and relevance for modern interview standards.
Want to bookmark, take notes, or join discussions?
Sign in to access all features and personalize your learning experience.
Source: SugharaIQ