Scopes

Segments use segments:*. Reading contacts within a segment requires contacts:read (members route).

Scope	Allows
`segments:read`	`GET /v1/segments`, `GET /v1/segments/{id}`, `GET /v1/segments/{id}/preview`
`segments:create`	`POST /v1/segments`
`segments:update`	`PUT /v1/segments/{id}`
`segments:delete`	`DELETE /v1/segments/{id}`

Common combinations

Flow	Scopes
Audience dashboard	`segments:read`, `contacts:read`
CRM creates segments + exports	`segments:read`, `segments:create`, `contacts:read`
Full management	`segments:*`

Code	Cause
403	Missing `segments:read` or `segments:create`
400	Invalid `definition` (rule missing `tagId` / `topicId`)
403 `PLAN_LIMIT_CRM`	Segment limit for the plan