intercom-enterprise-rbac

# Intercom Enterprise RBAC ## Overview Configure enterprise-grade access control for Intercom integrations using OAuth scopes, admin role management, and app-level permission enforcement. ## Prerequisites - Intercom workspace with admin access - Understanding of OAuth 2.0 flows - For public apps: OAuth configured in Developer Hub ## Intercom Admin Roles Intercom has built-in admin roles that control workspace access: | Role | API Access | Capabilities | |------|-----------|-------------| | Owner | Full | All operations, billing, workspace settings | | Admin | Full | Manage contacts, conversations, content | | Agent | Limited | Reply to conversations, view contacts | | Custom roles | Configurable | Enterprise plan feature | ### Step 1: List Admins and Roles ```typescript import { IntercomClient } from "intercom-client"; const client = new IntercomClient({ token: process.env.INTERCOM_ACCESS_TOKEN!, }); // List all admins in the workspace const adminList = await client.admins.list(); for (const admin of adminList.admins) { console.log(`${admin.name} (${admin.email})`); console.log(` ID: ${admin.id}`); console.log(` Type: ${admin.type}`); // "admin" or "team" console.log(` Active: ${admin.awayModeEnabled ? "Away" : "Available"}`); } // Find a specific admin by ID const admin = await client.admins.find({ adminId: "12345" }); console.log(`Admin: ${admin.name} - ${admin.email}`); ``` ## Instructions ### Step 2: OAuth Scope-Based Access Control For pu...