A scope is a permission Zoho grants to Kylo during consent. The Connect Zoho CRM dialog shows them as chips under CRM scopes. Kylo preselects 20 defaults and locks five of them on.

​
The default grant

The module delete scopes are never preselected. The tags delete scope is, because removing a tag from Kylo calls Zoho’s delete-tag endpoint. The dialog also lists optional scopes you can add: the ALL and DELETE scopes for each module (Leads, Contacts, Accounts, Deals, Notes, Activities, Calls, Tasks), ZohoCRM.settings.tags.ALL, ZohoCRM.bulk.read, and ZohoCRM.settings.roles.READ. Kylo’s tools do not need them.

​
What each scope area enables

​
When a scope is missing

If you removed scopes at consent or Zoho granted fewer than requested, the connection still reads Connected. The Connection tab shows a Missing scopes warning that names each one, for example “Zoho did not grant 1 requested scope: ZohoCRM.settings.tags.CREATE. Reconnect and select them to enable every feature.” Calls that need the missing scope fail with a Zoho error. To fix it, Disconnect, connect again, and keep the scopes named in the warning. See Zoho missing scopes. Zoho reference: OAuth scopes.

Connect Zoho CRM

Choose scopes at connect time.