Procore Permission and Project-Scope Governance

Overview

Procore access is the intersection of OAuth principal, tool permission, enabled project tool, project membership, permitted projects, and company routing. Manage these dimensions explicitly rather than treating a broad role label as the API contract.

Prerequisites

• User or DMSA identity and installed app version
• Complete endpoint, method, company, project, and data-classification inventory
• Current permission builder output and administrator for the target company

Instructions

Step 1: Map operations to tools

For each endpoint, record the company- or project-level Procore tool and minimum documented permission. Remove permissions that lack a current call-site owner.

Step 2: Review the DMSA manifest