The OAuth scopes requested during authorization, which define the permissions granted to the application.