Scopes is the access an app has to the Fortnox API.

All Access-Tokens have at least one scope that gives access to the endpoints for that token.
All scopes gives both read and write access to an endpoint and it is not possible to only have read access through the API.

An app can request one or more scopes, this information is then presented to the user in the consent screen, and the access token issued to the connection will be limited to the scopes granted.

It is possible to change scopes for an app after it has been created but please note that you need to obtain a new Authorization-Code to access the new scopes.
The connections that do not request a new Authorization-Code will not be affected by this change.

Please note that the company in Fortnox needs to have the license for the resource for you to be able to access it through the API. This table show what scope you will need for each resource.