The customer’s UiPath administrator decides whether to create the External Application and which scopes to grant. TaskSultan should document each scope in plain language, for example “read job status” or “start a selected process”.
Do not ask for tenant-wide write access merely to display a dashboard. Separate read-only insights from actions such as starting jobs, uploading packages or changing schedules. Test each feature against Community entitlements because an API permission does not guarantee the underlying product capability is available.
The UiPath administrator remains the authority for revocation, rotation and audit. AutoHub users and UiPath users are related by the customer’s governance choice. One does not automatically create the other.
#Least privilege
Start with read-only access for insights and add write scopes only for an explicitly enabled feature.
#Review
Review scopes whenever a new AutoHub capability is enabled.