allowed scopes