diff --git a/app/models/api_key_scope.rb b/app/models/api_key_scope.rb
index bc25ed97bcf..2a5216bb7af 100644
--- a/app/models/api_key_scope.rb
+++ b/app/models/api_key_scope.rb
@@ -37,7 +37,10 @@ class ApiKeyScope < ActiveRecord::Base
           bookmarks: { actions: %w[users#bookmarks], params: %i[username] },
           sync_sso: { actions: %w[admin/users#sync_sso], params: %i[sso sig] },
           show: { actions: %w[users#show], params: %i[username external_id] },
-          check_emails: { actions: %w[users#check_emails], params: %i[username] }
+          check_emails: { actions: %w[users#check_emails], params: %i[username] },
+          update: { actions: %w[users#update], params: %i[username] },
+          anonymize: { actions: %w[admin/users#anonymize] },
+          delete: { actions: %w[admin/users#destroy] },
         },
         email: {
           receive_emails: { actions: %w[admin/email#handle_mail] }
diff --git a/config/locales/client.en.yml b/config/locales/client.en.yml
index de1483da0b3..8a4b1c7b8cb 100644
--- a/config/locales/client.en.yml
+++ b/config/locales/client.en.yml
@@ -3752,6 +3752,9 @@ en:
               sync_sso: Synchronize a user using SSO.
               show: Obtain information about an user.
               check_emails: List user emails.
+              update: Update user profile information.
+              anonymize: Anonymize user accounts.
+              delete: Delete user accounts.
             email:
               receive_emails: Combine this scope with the mail-receiver to process incoming emails.