Access ID URL Service (id, profile, email, address, phone)
Allows access to the ID URL service. If you request profile, email, address, or phone, you can get the same results individually as when using id. These are equivalent. The ID URL uses either HTTP authentication headers (similar to REST API) or the HTTP parameter oauth_token.
Manage User Data via API (api)
Allows access to the current login user's account using APIs such as REST API or Bulk API. This scope also includes chatter_api, which allows access to Connect REST API resources.
Perform Requests at Any Time (refresh_token, offline_access)
Allows returning a refresh token if the requesting client is eligible to receive one. The refresh token enables the application to manipulate user data when the user is offline. This token has the same meaning as when requesting offline_access.