Ramp for FE- Ramp Security Requirements

Modified on Wed, May 6 at 12:32 PM

Overview

To connect Ramp for FE with Ramp, the user authorizing the connection must have the correct Ramp permissions.
Ramp for FE uses Ramp API permissions, also called scopes, to read and update the information needed for syncing transactions, maintaining accounting data, and updating sync status across Ramp objects.

Who can authorize the connection?

Only users with the Admin or Business Owner role in Ramp can authorize third-party applications.
If a user does not have the required Ramp role and tries to authorize Ramp for FE, they may see the following error:

"Business not authorized to use this application"

This means the user does not have sufficient permissions in Ramp to approve the connection.

Required Ramp permissions

Ramp for FE requires the following scopes to support syncing and accounting-related activity:

Scope	What it allows Ramp for FE to do
accounting:read	Read accounting settings and accounting-related data
accounting:write	Update accounting-related data
transactions:read	Read transaction information
bills:read	Read bill information
reimbursements:read	Read reimbursement information
locations:read	Read location data
locations:write	Update location data
departments:read	Read department data
departments:write	Update department data
receipts:read	Read receipt information
entities:read	Read entity information
business:read	Read business-level information
vendors:read	Read vendor information
vendors:write	Update vendor information
users:read	Read user information

These scopes are required so Ramp for FE can sync transactions, maintain accounting information, and update the sync status of Ramp objects.

Admin consent is required

Ramp requires admin consent before a third-party application can be authorized. This consent must be provided by a Ramp user with the appropriate role, such as Admin or Owner.

Important Notes

The permissions listed above are the minimum Ramp permissions required for Ramp for FE. Your organization may require additional permissions depending on your Ramp setup, internal approval process, or the Ramp modules your organization uses.