To modify scopes on a Customer-Managed (Enterprise) OAuth application, the connection must be fully re-created. This is required by the OAuth2 specification: users must re-authorize the application to grant any new scopes.
Supporting in-place scope updates while preserving existing connections is on our roadmap. We don't offer it today because mixed scope states across users lead to inconsistent behavior, where loops succeed for some users and fail for others on the same integration.
Steps
[Application Dependent] If the application manages OAuth scopes within its own configuration (e.g., Microsoft, DocuSign, NetDocuments), add or modify the scopes there first.
Navigate to the Caddi Integrations page: https://app.trycaddi.com/credentials
Click on
Integration SetupIf you don't see Integration Setup, you don't have Admin privileges. Contact your Caddi administrator to update your role.
Navigate to the connection you want to modify
⚠️ Deleting a connection immediately disconnects all users of that integration.
Click
Deleteand complete the confirmation dialogCreate a new connection with the updated scopes, provided as a space-separated list
If you're on a plan that supports multi-instance connections, you'll be prompted to re-create any missing connections by name to preserve existing loop functionality.
[Optional] Notify affected users (if known). Because this is a manual IT process, Caddi won't notify users of the disconnection until their next loop run on the impacted tools. We recommend reaching out to impacted users once the updated connection is in place.
Sample Email Template
Subject: Reconnect [Integration Name] in Caddi
Hi team,
We've updated our [Integration Name] connection in Caddi. Please head to the Caddi Integrations page and reconnect [Integration Name] at your earliest convenience.
Reach out to [IT contact] if you run into any issues.
Thanks,
[Your name]
