# Access Access scopes, connected apps and API keys - [Every access scope and whether your role can grant it](https://headless-lms.dev/docs/api/access/listAccessScopes): Staff only (owner, admin, instructor). Each scope an app connection or API key can carry, marked with whether your role holds it. Only allowed scopes can be granted. - [Apps connected to this organization as you](https://headless-lms.dev/docs/api/access/listConnectedApps): Staff only (owner, admin, instructor). The apps you connected to this organization, each with the scopes you granted and when. - [Disconnect an app](https://headless-lms.dev/docs/api/access/revokeConnectedApp): Staff only (owner, admin, instructor). Revokes your consent and refresh tokens for the app in this organization; its next call is refused. - [Your API keys for this organization](https://headless-lms.dev/docs/api/access/listApiKeys): Staff only (owner, admin, instructor). Your keys for this organization with their scopes. The key itself is never returned again after it is created. - [Create an API key](https://headless-lms.dev/docs/api/access/createApiKey): Staff only (owner, admin, instructor). The key acts as you in this organization with the scopes given. 403 when your role cannot hold one of them. The key is returned once. - [Delete an API key](https://headless-lms.dev/docs/api/access/deleteApiKey): Staff only (owner, admin, instructor). 404 when the key is not one of yours in this organization.