OAuth Scopes for teammates
Scribe requests the following read only scopes when syncing your teammates from Zoho Mail:1
Check who connects Zoho Mail
ZohoMail.accounts.READThis scope allows Scribe to read the connecting admin’s own account: their role, their email address and the organization’s ID.2
Sync your teammates
ZohoMail.organization.accounts.READThis scope allows Scribe to read the users of your Zoho Mail organization, with their aliases and profile fields.3
Sync your groups
ZohoMail.organization.groups.READThis scope allows Scribe to read the groups you have created and their members.4
Sync your domains
ZohoMail.organization.domains.READThis scope allows Scribe to read the domain names of your Zoho Mail organization.OAuth Scopes for signatures
Scribe requests the following scopes when installing signatures in Zoho Mail:1
Check who connects Zoho Mail
ZohoMail.accounts.READThis scope allows Scribe to check that the connecting admin is an admin of the organization, and to read the organization’s ID.2
Find each teammate's mailbox
ZohoMail.organization.accounts.READThis scope allows Scribe to find the Zoho Mail user behind each teammate’s address and read the signatures Scribe installed for them.3
Add, update and remove signatures
ZohoMail.organization.accounts.CREATE, ZohoMail.organization.accounts.UPDATE, ZohoMail.organization.accounts.DELETEThese scopes allow Scribe to add, update and remove your teammates’ signatures. Zoho Mail has no permission for signatures alone, so these scopes also cover managing user accounts. Scribe uses them only for signatures: it never creates, edits or deletes a user.Data Stored in Scribe
From the scopes listed above, Scribe collects and stores the following fields: User profile data: first name, last name, and job position and department when Zoho fills them. Email addresses: each teammate’s address and, if you import them, their confirmed aliases. Phone numbers: mobile phone and work phone. Address: street address, city, state or province, zip or postal code, and country. Groups: group names and memberships. Domains: domain hostnames. Custom information: the values of the custom information fields you have created in Zoho Mail. Signatures: for each signature installed, the ID Zoho Mail gives it. Connection: your Zoho data center, your organization’s ID and the authorization from your consent.Scribe cannot read or send your emails, and doesn’t store any profile picture from Zoho Mail. Scribe is SOC 2 Type II compliant.