The permissions granted by the session's access token. Available scopes are defined by the AuthenticationProvider.
Online Documentation