Yup. I think OAuth calls it scope, and it's a list of requested permissions.