Content scope missing

Developer Support APIs & Integrations
,
1

When a user goes through OAuth authorization flow, `content` scope won’t be listed when navigating to authorization link unless user has `superadmin` role.

* scopes the app is requesting:

‘crm.lists.read’,

‘crm.objects.companies.read’,

‘crm.objects.contacts.read’,

‘crm.objects.deals.read’,

‘crm.objects.owners.read’

* optional scopes:

‘automation’,

‘content’,

‘e-commerce’,

‘social’,

‘business-intelligence’,

‘forms’,

‘sales-email-read’,

‘tickets’,

‘crm.objects.custom.read’,

‘crm.schemas.custom.read’,

‘crm.objects.feedback_submissions.read’,

I checked post:

* https://community.hubspot.com/t5/APIs-Integrations/Authorize-Couldn-t-complete-the-connection-with-optional-scopes/m-p/1093914#M79468

But the answer didn’t solve my issue.

The authorization link is looking like this:

https://app.hubspot.com/oauth/authorize?client_id=xxx-xxx-xxxc&client_secret=xxx-xxx-xxx&redirect_uri=<encoded_callback>&response_type=code&scope=crm.lists.read%20crm.objects.companies.read%20crm.objects.contacts.read%20crm.objects.deals.read%20crm.objects.owners.read&optional_scope=automation%20content%20e-commerce%20social%20business-intelligence%20forms%20sales-email-read%20tickets%20crm.objects.custom.read%20crm.schemas.custom.read%20crm.objects.feedback_submissions.read

I can’t also find which permissions should I enable for a user in order to allow them to have access to `content` scope

2

Hey there,
I would ensure that the user who is granting access is a Super Admin or make sure you are logged in as one when clicking the OAuth link.
This would be a great start to debug this issue.

3

The thing is that I don’t want that user to be super admin, just want to provide them with the `content` permission to allow them to pull data from certain endpoints. I’ve enabled all the marketing permissions and that didn’t work.

4

Hello gogrow_dev,

I am struggling to find the permissions to give users access to Content too, did you get an answer on this?

Thanks!

5

Hello @ATU-48 -

Tagging @DilionSmith to see if they have additional insights or experience with this specific scope limitation.

To allow a non-Super Admin user to authorize an OAuth app, you typically need to ensure they have the App Marketplace Access permission enabled. This is often the missing piece even when a user has all the correct “Marketing” or “Content” tool permissions.
As mentioned here, “If granting the user with these permissions does not work you will need to give them Super Admin permissions to resolve the error.”
Hope this helps!
Welcome to the HubSpot Community!

6

Hello @SealaB

Thanks for the quick reply and the welcome!

I’m very new to HubSpot, so forgive me if this is a silly question; I am specifically referring to where to find the permissions for the Content Tool when amending Permission Sets (See photo attached), I have checked all the categories and done a lot of searching online but no luck.

Screenshot 2025-11-26 164759.png
Screenshot 2025-11-26 164759.png1712×1232 153 KB

Do you have any guidance on this?

Thanks!

7

@ATull1 - sure thing!
To answer your question directly: there is no single permission labeled “Content Tool” in the settings.
Even with specific permissions enabled, the content scope is a broad, legacy scope that often requires Super Admin status to authorize during an integration connection. There is not a specific toggle to enable that scope on HubSpot’s end.
If enabling the permissions under the Marketing tab does not resolve the “missing scope” error, we would assume that the specific app requires a Super Admin to complete the initial connection.
If you have any issues installing or using the app, you can also request support from the app’s creator.
If the app was built by HubSpot, feel free to contact my good friends in HubSpot Support for additional help with this specific issue, they will have the best tools to assist further with any errors you are seeing during this process!