# API permissions for Associations

**URL:** <https://community.hubspot.com/t/api-permissions-for-associations/67343>\
**Category:** APIs & Integrations\
**Created:** [October 18, 2022, 12:58pm UTC](https://community.hubspot.com/t/api-permissions-for-associations/67343 "2022-10-18T12:58:04Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![PBeck](https://avatars.discourse-cdn.com/v4/letter/p/e480ec/32.png) [@PBeck](https://community.hubspot.com/u/PBeck)\
**Post date:** [October 18, 2022, 12:58pm UTC](https://community.hubspot.com/t/api-permissions-for-associations/67343/1 "2022-10-18T12:58:04Z")

</div>

I am working on an integration using a private app.  
This app is able to create both a Deal and a Company, but for some reason when trying to associate them, I am getting an error “User does not have permissions to associate DEAL xxxxxxxxxx with COMPANY xxxxxxxx”.  
I have looked through the documentation and it seems the permission scopes need to create the entities are the same as the ones needed to associate them.

I have no idea which permissions I need to ask to be given to the app to fix this issue.

What I am missing?

---

<div class="post-metadata">

**Author:** ![Teun](https://d10pqhm3lwygmk.cloudfront.net/user_avatar/community.hubspot.com/teun/32/28739_2.png) [@Teun](https://community.hubspot.com/u/Teun)\
**Post date:** [October 18, 2022, 5:27pm UTC](https://community.hubspot.com/t/api-permissions-for-associations/67343/2 "2022-10-18T17:27:03Z")

</div>

Hi @PBeck ,

Based on your description you need the following permissions:

_crm.objects.companies.read_

_crm.objects.companies.write_  
_crm.objects.deals.read_  
_crm.objects.deals_.write

I have the following as well for my integration and have no issues creating associations:

_crm.schemas.deals.read_

_crm.schemas.deals.write_  
_crm.schemas.companies.read_  
_crm.schemas.companies.write_

---

<div class="post-metadata">

**Author:** ![chord](https://avatars.discourse-cdn.com/v4/letter/c/77aa72/32.png) [@chord](https://community.hubspot.com/u/chord)\
**Post date:** [October 28, 2022, 10:47am UTC](https://community.hubspot.com/t/api-permissions-for-associations/67343/3 "2022-10-28T10:47:06Z")

</div>

How to get this permissions?