Problem Definition

There are integrations for Bitbucket Data Center using OAuth with the Client Credentials Grant flow (like the Jenkins Bitbucket Branch Source plugin). The access tokens obtained represent the owner of the consumer, and if the OAuth consumer has Repositories permissions then the access tokens have access to all the repositories in the instance.

Some users would like to limit the repositories that an OAuth consumer has access to. In the case of Jenkins plugin, they don't want Jenkins to have access to all of repositories in the instance.

Suggested Solution

Allow admins to limit the repositories a certain OAuth consumer can access.