CRM object level access control for private apps

Developer Support APIs & Integrations
1

Hello,

I see that service (API) level access control for private app is defined. How do I manage resource (Object or user Data or account etc) level access to Private App?

Regards,

Kishor CHaturani

2

Hey @KChaturani the scopes for a private app are set when setting up your private app. There’s a guide on how this works in the dev docs here.

3

Hi Tom, Thank you for your prompt input. Have looked at the guide, it shows Read /Write access to deals and other objects. Is there a way to restrict the access to deals of specific users/accounts? I am trying to restrict to specific accounts only not to the complete deals list in the CRM.

4

Hey @KChaturani when you say specific “accounts” what do you mean exactly? Do you mean you only want to update specific deals? or only have you private app update specific HubSpot portals?

5

I am refering to specific deals, can the private app be restricted to access specific deals only?

6

No, there are no permissions to access only specific records. Users can be set to access owned only records but thats as granular as it gets, private apps can only be set to read or write, you would need to filter the deals within your private app to decide which ones are displayed to the end users.

7

Yes it does solve the problem, thank you for your support. Just to make sure my understanding is correct. Since the private app is registered by a Super-admin the app will be able to access all deals created for that seller organization. There is no way to restrict the access to specific deals for the app.