---
title: "Scopes & roles"
locale: en
url: https://tlg.builera.app/en/docs/reference/scopes
verified: 2026-10-24
app_version: "2.0"
generated: true
---

# Scopes & roles

Scopes, quick permission presets, MCP profiles and how roles limit a connection.

A connection can only do work whose scope it holds, within its role (never above its creator) and on the accounts assigned to it.

## Scopes

| Code | Description | Operations |
| --- | --- | --- |
| `accounts.read` | View accounts | 22 |
| `accounts.settings` | Account settings (run hours, limits, labels) | 8 |
| `accounts.manage` | Create / sign in / sign out / remove accounts | 9 |
| `messages.read` | Read chats and messages | 23 |
| `messages.send` | Send messages, mark as read, show typing | 23 |
| `messages.manage` | Edit / delete / forward / pin messages | 9 |
| `chats.manage` | Chat status, assignment, tags, notes, saved replies | 6 |
| `contacts.write` | Find people, save contacts, create group chats | 7 |
| `groups.join` | Join / leave groups | 2 |
| `groups.admin` | Manage groups | 35 |
| `groups.scan` | Scan group members | 2 |
| `profile.write` | Edit Telegram profile | 6 |
| `crm.read` | View people and lists | 11 |
| `crm.write` | Edit people, stages, tags, lists, import people | 17 |
| `crm.export` | Export people data | 1 |
| `crm.erase` | Permanently delete a person's data | 1 |
| `campaigns.write` | Create / edit campaigns | 13 |
| `campaigns.run` | Run / stop campaigns | 5 |
| `nurture.write` | Account nurture, schedules | 8 |
| `discovery.write` | Find groups, keywords, signals | 7 |
| `automation.write` | Configuration packs, routines, automation rules | 10 |
| `stats.read` | View stats and limits | 4 |
| `audit.read` | View logs and alerts | 5 |
| `infra.manage` | Workers, proxy | 18 |
| `members.manage` | Members and invitations | 7 |
| `integrations.manage` | API keys, all workspace webhooks, other connections | 8 |
| `webhooks.read` | View this connection's webhooks, deliveries, event catalog | 8 |
| `webhooks.manage` | Create / edit / send test / recover this connection's webhooks | 11 |
| `bots.manage` | Create / edit / delete account bots (via BotFather) | 7 |

`integrations.manage` includes `webhooks.read` and `webhooks.manage`.

## Quick presets

| Name | Role | Scope |
| --- | --- | --- |
| Read-only (`read`) | `viewer` | `accounts.read`, `messages.read`, `crm.read`, `stats.read`, `audit.read` |
| Operations (`operate`) | `agent` | `accounts.read`, `messages.read`, `crm.read`, `stats.read`, `audit.read`, `messages.send`, `messages.manage`, `chats.manage`, `contacts.write`, `crm.write`, `webhooks.read`, `webhooks.manage` |
| Setup (`setup`) | `manager` | `accounts.read`, `messages.read`, `crm.read`, `stats.read`, `audit.read`, `accounts.settings`, `campaigns.write`, `campaigns.run`, `nurture.write`, `discovery.write`, `automation.write`, `groups.join`, `groups.scan`, `webhooks.read`, `webhooks.manage` |
| Full access (`full`) | `manager` | * |

## Profile

| Code | Name | Named tools |
| --- | --- | --- |
| `realtime` | Real-time operations | 35 |
| `setup` | Automation setup | 35 |
| `prospecting` | Discover | 35 |
| `reports` | Reports | 35 |
| `admin` | Administration | 35 |
| `full` | Full | 35 |