diff --git a/features/api-resource-mgt/org.wso2.carbon.identity.api.resource.mgt.server.feature/resources/system-api-resource.xml b/features/api-resource-mgt/org.wso2.carbon.identity.api.resource.mgt.server.feature/resources/system-api-resource.xml
index 5a3e7dbfebd8..b900fb2e0a5b 100644
--- a/features/api-resource-mgt/org.wso2.carbon.identity.api.resource.mgt.server.feature/resources/system-api-resource.xml
+++ b/features/api-resource-mgt/org.wso2.carbon.identity.api.resource.mgt.server.feature/resources/system-api-resource.xml
@@ -1012,6 +1012,18 @@
                    description="Delete Consent Purpose"/>
         </Scopes>
     </APIResource>
+    <APIResource name="Consent Management V2 Consents API" identifier="/api/identity/consent-mgt/v2.0/consents"
+                 requiresAuthorization="true"
+                 description="API representation of the Consent Management V2 Consents API" type="TENANT">
+        <Scopes>
+            <Scope displayName="View Consent" name="internal_consent_mgt_consent_view"
+                   description="View Consents"/>
+            <Scope displayName="Create Consent" name="internal_consent_mgt_consent_create"
+                   description="Create new Consent"/>
+            <Scope displayName="Update Consent" name="internal_consent_mgt_consent_update"
+                   description="Update Consent"/>
+        </Scopes>
+    </APIResource>
     <APIResource name="Consent Management V2 Elements API" identifier="/o/api/identity/consent-mgt/v2.0/elements"
                  requiresAuthorization="true"
                  description="API representation of the Consent Management V2 Elements API for organizations" type="ORGANIZATION">
@@ -1038,6 +1050,18 @@
                    description="Delete Consent Purpose in the organization"/>
         </Scopes>
     </APIResource>
+    <APIResource name="Consent Management V2 Consents API" identifier="/o/api/identity/consent-mgt/v2.0/consents"
+                 requiresAuthorization="true"
+                 description="API representation of the Consent Management V2 Consents API for organizations" type="ORGANIZATION">
+        <Scopes>
+            <Scope displayName="View Consent" name="internal_org_consent_mgt_consent_view"
+                   description="View Consents in the organization"/>
+            <Scope displayName="Create Consent" name="internal_org_consent_mgt_consent_create"
+                   description="Create new Consent in the organization"/>
+            <Scope displayName="Update Consent" name="internal_org_consent_mgt_consent_update"
+                   description="Update Consent in the organization"/>
+        </Scopes>
+    </APIResource>
     <APIResource name="Consent Purpose Application Mapping API"
                  identifier="/api/server/v1/configs/consent/purposes"
                  requiresAuthorization="true"
diff --git a/features/api-resource-mgt/org.wso2.carbon.identity.api.resource.mgt.server.feature/resources/system-api-resource.xml.j2 b/features/api-resource-mgt/org.wso2.carbon.identity.api.resource.mgt.server.feature/resources/system-api-resource.xml.j2
index bb055b386676..fc8a31adedc3 100644
--- a/features/api-resource-mgt/org.wso2.carbon.identity.api.resource.mgt.server.feature/resources/system-api-resource.xml.j2
+++ b/features/api-resource-mgt/org.wso2.carbon.identity.api.resource.mgt.server.feature/resources/system-api-resource.xml.j2
@@ -1008,6 +1008,18 @@
                    description="Delete Consent Purpose"/>
         </Scopes>
     </APIResource>
+    <APIResource name="Consent Management V2 Consents API" identifier="/api/identity/consent-mgt/v2.0/consents"
+                 requiresAuthorization="true"
+                 description="API representation of the Consent Management V2 Consents API" type="TENANT">
+        <Scopes>
+            <Scope displayName="View Consent" name="internal_consent_mgt_consent_view"
+                   description="View Consents"/>
+            <Scope displayName="Create Consent" name="internal_consent_mgt_consent_create"
+                   description="Create new Consent"/>
+            <Scope displayName="Update Consent" name="internal_consent_mgt_consent_update"
+                   description="Update Consent"/>
+        </Scopes>
+    </APIResource>
     <APIResource name="Consent Management V2 Elements API" identifier="/o/api/identity/consent-mgt/v2.0/elements"
                  requiresAuthorization="true"
                  description="API representation of the Consent Management V2 Elements API for organizations" type="ORGANIZATION">
@@ -1034,6 +1046,18 @@
                    description="Delete Consent Purpose in the organization"/>
         </Scopes>
     </APIResource>
+    <APIResource name="Consent Management V2 Consents API" identifier="/o/api/identity/consent-mgt/v2.0/consents"
+                 requiresAuthorization="true"
+                 description="API representation of the Consent Management V2 Consents API for organizations" type="ORGANIZATION">
+        <Scopes>
+            <Scope displayName="View Consent" name="internal_org_consent_mgt_consent_view"
+                   description="View Consents in the organization"/>
+            <Scope displayName="Create Consent" name="internal_org_consent_mgt_consent_create"
+                   description="Create new Consent in the organization"/>
+            <Scope displayName="Update Consent" name="internal_org_consent_mgt_consent_update"
+                   description="Update Consent in the organization"/>
+        </Scopes>
+    </APIResource>
     <APIResource name="Consent Purpose Application Mapping API"
                  identifier="/api/server/v1/configs/consent/purposes"
                  requiresAuthorization="true"
diff --git a/features/identity-core/org.wso2.carbon.identity.core.server.feature/resources/resource-access-control-v2.xml b/features/identity-core/org.wso2.carbon.identity.core.server.feature/resources/resource-access-control-v2.xml
index 9d5d1a128bad..fe5dc0e0e052 100644
--- a/features/identity-core/org.wso2.carbon.identity.core.server.feature/resources/resource-access-control-v2.xml
+++ b/features/identity-core/org.wso2.carbon.identity.core.server.feature/resources/resource-access-control-v2.xml
@@ -360,9 +360,33 @@
         <Scopes>internal_org_consent_mgt_purpose_update</Scopes>
     </Resource>
 
-    <Resource context="(.*)/o/api/identity/consent-mgt/v2.0/consents" secured="true" http-method="POST"/>
-    <Resource context="(.*)/o/api/identity/consent-mgt/v2.0/consents" secured="true" http-method="GET"/>
-    <Resource context="(.*)/o/api/identity/consent-mgt/v2.0/consents/(.+)$" secured="true" http-method="GET"/>
+    <Resource context="(.*)/o/api/identity/consent-mgt/v2.0/consents" secured="true" http-method="POST">
+        <Scopes>internal_login</Scopes>
+        <Operations mandatory="true">
+            <Operation name="createConsent">
+                <scope>internal_org_consent_mgt_consent_create</scope>
+            </Operation>
+        </Operations>
+    </Resource>
+    <Resource context="(.*)/o/api/identity/consent-mgt/v2.0/consents" secured="true" http-method="GET">
+        <Scopes>internal_login</Scopes>
+        <Operations mandatory="true">
+            <Operation name="viewConsent">
+                <scope>internal_org_consent_mgt_consent_view</scope>
+            </Operation>
+        </Operations>
+    </Resource>
+    <Resource context="(.*)/o/api/identity/consent-mgt/v2.0/consents/(.+)$" secured="true" http-method="GET">
+        <Scopes>internal_login</Scopes>
+        <Operations mandatory="true">
+            <Operation name="viewConsent">
+                <scope>internal_org_consent_mgt_consent_view</scope>
+            </Operation>
+        </Operations>
+    </Resource>
+    <Resource context="(.*)/o/api/identity/consent-mgt/v2.0/consents/(.+)$" secured="true" http-method="PATCH">
+        <Scopes>internal_org_consent_mgt_consent_update</Scopes>
+    </Resource>
     <Resource context="(.*)/o/api/identity/consent-mgt/v2.0/consents/(.+)/revoke" secured="true" http-method="POST"/>
     <Resource context="(.*)/o/api/identity/consent-mgt/v2.0/consents/(.+)/authorize" secured="true" http-method="POST"/>
     <Resource context="(.*)/o/api/identity/consent-mgt/v2.0/consents/(.+)/validate" secured="true" http-method="GET"/>
@@ -410,9 +434,33 @@
         <Scopes>internal_consent_mgt_purpose_update</Scopes>
     </Resource>
 
-    <Resource context="(.*)/api/identity/consent-mgt/v2.0/consents" secured="true" http-method="POST"/>
-    <Resource context="(.*)/api/identity/consent-mgt/v2.0/consents" secured="true" http-method="GET"/>
-    <Resource context="(.*)/api/identity/consent-mgt/v2.0/consents/(.+)$" secured="true" http-method="GET"/>
+    <Resource context="(.*)/api/identity/consent-mgt/v2.0/consents" secured="true" http-method="POST">
+        <Scopes>internal_login</Scopes>
+        <Operations mandatory="true">
+            <Operation name="createConsent">
+                <scope>internal_consent_mgt_consent_create</scope>
+            </Operation>
+        </Operations>
+    </Resource>
+    <Resource context="(.*)/api/identity/consent-mgt/v2.0/consents" secured="true" http-method="GET">
+        <Scopes>internal_login</Scopes>
+        <Operations mandatory="true">
+            <Operation name="viewConsent">
+                <scope>internal_consent_mgt_consent_view</scope>
+            </Operation>
+        </Operations>
+    </Resource>
+    <Resource context="(.*)/api/identity/consent-mgt/v2.0/consents/(.+)$" secured="true" http-method="GET">
+        <Scopes>internal_login</Scopes>
+        <Operations mandatory="true">
+            <Operation name="viewConsent">
+                <scope>internal_consent_mgt_consent_view</scope>
+            </Operation>
+        </Operations>
+    </Resource>
+    <Resource context="(.*)/api/identity/consent-mgt/v2.0/consents/(.+)$" secured="true" http-method="PATCH">
+        <Scopes>internal_consent_mgt_consent_update</Scopes>
+    </Resource>
     <Resource context="(.*)/api/identity/consent-mgt/v2.0/consents/(.+)/revoke" secured="true" http-method="POST"/>
     <Resource context="(.*)/api/identity/consent-mgt/v2.0/consents/(.+)/authorize" secured="true" http-method="POST"/>
     <Resource context="(.*)/api/identity/consent-mgt/v2.0/consents/(.+)/validate" secured="true" http-method="GET"/>
diff --git a/features/identity-core/org.wso2.carbon.identity.core.server.feature/resources/resource-access-control-v2.xml.j2 b/features/identity-core/org.wso2.carbon.identity.core.server.feature/resources/resource-access-control-v2.xml.j2
index 40b48a588a01..3bedc5128b2b 100644
--- a/features/identity-core/org.wso2.carbon.identity.core.server.feature/resources/resource-access-control-v2.xml.j2
+++ b/features/identity-core/org.wso2.carbon.identity.core.server.feature/resources/resource-access-control-v2.xml.j2
@@ -476,9 +476,33 @@
             <Scopes>internal_org_consent_mgt_purpose_update</Scopes>
         </Resource>
 
-        <Resource context="(.*)/o/api/identity/consent-mgt/v2.0/consents" secured="true" http-method="POST"/>
-        <Resource context="(.*)/o/api/identity/consent-mgt/v2.0/consents" secured="true" http-method="GET"/>
-        <Resource context="(.*)/o/api/identity/consent-mgt/v2.0/consents/(.+)$" secured="true" http-method="GET"/>
+        <Resource context="(.*)/o/api/identity/consent-mgt/v2.0/consents" secured="true" http-method="POST">
+            <Scopes>internal_login</Scopes>
+            <Operations mandatory="true">
+                <Operation name="createConsent">
+                    <scope>internal_org_consent_mgt_consent_create</scope>
+                </Operation>
+            </Operations>
+        </Resource>
+        <Resource context="(.*)/o/api/identity/consent-mgt/v2.0/consents" secured="true" http-method="GET">
+            <Scopes>internal_login</Scopes>
+            <Operations mandatory="true">
+                <Operation name="viewConsent">
+                    <scope>internal_org_consent_mgt_consent_view</scope>
+                </Operation>
+            </Operations>
+        </Resource>
+        <Resource context="(.*)/o/api/identity/consent-mgt/v2.0/consents/(.+)$" secured="true" http-method="GET">
+            <Scopes>internal_login</Scopes>
+            <Operations mandatory="true">
+                <Operation name="viewConsent">
+                    <scope>internal_org_consent_mgt_consent_view</scope>
+                </Operation>
+            </Operations>
+        </Resource>
+        <Resource context="(.*)/o/api/identity/consent-mgt/v2.0/consents/(.+)$" secured="true" http-method="PATCH">
+            <Scopes>internal_org_consent_mgt_consent_update</Scopes>
+        </Resource>
         <Resource context="(.*)/o/api/identity/consent-mgt/v2.0/consents/(.+)/revoke" secured="true" http-method="POST"/>
         <Resource context="(.*)/o/api/identity/consent-mgt/v2.0/consents/(.+)/authorize" secured="true" http-method="POST"/>
         <Resource context="(.*)/o/api/identity/consent-mgt/v2.0/consents/(.+)/validate" secured="true" http-method="GET"/>
@@ -526,9 +550,33 @@
             <Scopes>internal_consent_mgt_purpose_update</Scopes>
         </Resource>
 
-        <Resource context="(.*)/api/identity/consent-mgt/v2.0/consents" secured="true" http-method="POST"/>
-        <Resource context="(.*)/api/identity/consent-mgt/v2.0/consents" secured="true" http-method="GET"/>
-        <Resource context="(.*)/api/identity/consent-mgt/v2.0/consents/(.+)$" secured="true" http-method="GET"/>
+        <Resource context="(.*)/api/identity/consent-mgt/v2.0/consents" secured="true" http-method="POST">
+            <Scopes>internal_login</Scopes>
+            <Operations mandatory="true">
+                <Operation name="createConsent">
+                    <scope>internal_consent_mgt_consent_create</scope>
+                </Operation>
+            </Operations>
+        </Resource>
+        <Resource context="(.*)/api/identity/consent-mgt/v2.0/consents" secured="true" http-method="GET">
+            <Scopes>internal_login</Scopes>
+            <Operations mandatory="true">
+                <Operation name="viewConsent">
+                    <scope>internal_consent_mgt_consent_view</scope>
+                </Operation>
+            </Operations>
+        </Resource>
+        <Resource context="(.*)/api/identity/consent-mgt/v2.0/consents/(.+)$" secured="true" http-method="GET">
+            <Scopes>internal_login</Scopes>
+            <Operations mandatory="true">
+                <Operation name="viewConsent">
+                    <scope>internal_consent_mgt_consent_view</scope>
+                </Operation>
+            </Operations>
+        </Resource>
+        <Resource context="(.*)/api/identity/consent-mgt/v2.0/consents/(.+)$" secured="true" http-method="PATCH">
+            <Scopes>internal_consent_mgt_consent_update</Scopes>
+        </Resource>
         <Resource context="(.*)/api/identity/consent-mgt/v2.0/consents/(.+)/revoke" secured="true" http-method="POST"/>
         <Resource context="(.*)/api/identity/consent-mgt/v2.0/consents/(.+)/authorize" secured="true" http-method="POST"/>
         <Resource context="(.*)/api/identity/consent-mgt/v2.0/consents/(.+)/validate" secured="true" http-method="GET"/>