How to configure granted scopes to 3rd party app ?

[vlad]

We use the Atlas Bot 3rd party application that requires several scopes on our Bitbucket tenant.

• Read your account information
• Read your repositories' issues
• Read your repositories and their pull requests
• Read your team membership information

We would like to only grant it access to the webhooks.

Also - we not want to grant access to the repository contents, but only to the pullrequests.

Is there a way to choose which of the required scopes is granted ?

Is it possible to only grant access to webhooks ?

ref:

https://developer.atlassian.com/cloud/bitbucket/bitbucket-cloud-rest-api-scopes/

[seanaty]

Do you have more information about Atlas bot and which type of authentication it uses?

Typically apps request certain scopes which you can approve or reject wholesale. You cannot pick and choose which scopes you give them (only you can choose whether or not to install the application).

That said, some apps might work with App Passwords which you provide to them, in that case you can provide them an app password with whatever scopes you decide. That said the application may or may not work if it needs some of those scopes.