# Which scopes should I pick?

Select the fewest permissions your integration actually needs. Settings -> API shows the scopes an owner can choose. A registered system permission is not necessarily a selectable customer credential option, so follow the current selection screen and [API Reference](https://docs.closemagnet.com/api-reference).

For example, leads:read is limited to a named campaign, while account-wide lead reads require leads:read_all. Give each integration or agent its own named credential so one can be revoked without breaking the others.

Read online: https://docs.closemagnet.com/articles/questions/which-scopes-should-i-pick