# CRM object level access control for private apps **URL:** \ **Category:** APIs & Integrations\ **Tags:** integrations\ **Created:** [October 11, 2023, 9:59am UTC](https://community.hubspot.com/t/crm-object-level-access-control-for-private-apps/91549 "2023-10-11T09:59:32Z")\ **Posts on this page:** 7\ **Page:** 1
**Author:** ![KChaturani](https://avatars.discourse-cdn.com/v4/letter/k/258eb7/32.png) [@KChaturani](https://community.hubspot.com/u/KChaturani)\ **Post date:** [October 11, 2023, 9:59am UTC](https://community.hubspot.com/t/crm-object-level-access-control-for-private-apps/91549/1 "2023-10-11T09:59:32Z")
Hello, I see that service (API) level access control for private app is defined. How do I manage resource (Object or user Data or account etc) level access to Private App? Regards, Kishor CHaturani ---
**Author:** ![TomM2](https://d10pqhm3lwygmk.cloudfront.net/user_avatar/community.hubspot.com/tomm2/32/70887_2.png) [@TomM2](https://community.hubspot.com/u/TomM2)\ **Post date:** [October 11, 2023, 10:36am UTC](https://community.hubspot.com/t/crm-object-level-access-control-for-private-apps/91549/2 "2023-10-11T10:36:00Z")
Hey @KChaturani the scopes for a private app are set when setting up your private app. There’s a guide on how this works in the [dev docs here](https://developers.hubspot.com/docs/api/private-apps#:~:text=Private%20apps%20allow%20you%20to,apps%20in%20your%20HubSpot%20account.). ---
**Author:** ![KChaturani](https://avatars.discourse-cdn.com/v4/letter/k/258eb7/32.png) [@KChaturani](https://community.hubspot.com/u/KChaturani)\ **Post date:** [October 11, 2023, 10:47am UTC](https://community.hubspot.com/t/crm-object-level-access-control-for-private-apps/91549/3 "2023-10-11T10:47:41Z")
Hi Tom, Thank you for your prompt input. Have looked at the guide, it shows Read /Write access to deals and other objects. Is there a way to restrict the access to deals of specific users/accounts? I am trying to restrict to specific accounts only not to the complete deals list in the CRM. ---
**Author:** ![TomM2](https://d10pqhm3lwygmk.cloudfront.net/user_avatar/community.hubspot.com/tomm2/32/70887_2.png) [@TomM2](https://community.hubspot.com/u/TomM2)\ **Post date:** [October 12, 2023, 10:07am UTC](https://community.hubspot.com/t/crm-object-level-access-control-for-private-apps/91549/4 "2023-10-12T10:07:34Z")
Hey @KChaturani when you say specific “accounts” what do you mean exactly? Do you mean you only want to update specific deals? or only have you private app update specific HubSpot portals? ---
**Author:** ![KChaturani](https://avatars.discourse-cdn.com/v4/letter/k/258eb7/32.png) [@KChaturani](https://community.hubspot.com/u/KChaturani)\ **Post date:** [October 12, 2023, 10:16am UTC](https://community.hubspot.com/t/crm-object-level-access-control-for-private-apps/91549/5 "2023-10-12T10:16:34Z")
I am refering to specific deals, can the private app be restricted to access specific deals only? ---
**Author:** ![TomM2](https://d10pqhm3lwygmk.cloudfront.net/user_avatar/community.hubspot.com/tomm2/32/70887_2.png) [@TomM2](https://community.hubspot.com/u/TomM2)\ **Post date:** [October 12, 2023, 1:43pm UTC](https://community.hubspot.com/t/crm-object-level-access-control-for-private-apps/91549/6 "2023-10-12T13:43:20Z")
No, there are no permissions to access only specific records. Users can be set to access owned only records but thats as granular as it gets, private apps can only be set to read or write, you would need to filter the deals within your private app to decide which ones are displayed to the end users. ---
**Author:** ![KChaturani](https://avatars.discourse-cdn.com/v4/letter/k/258eb7/32.png) [@KChaturani](https://community.hubspot.com/u/KChaturani)\ **Post date:** [October 13, 2023, 7:37am UTC](https://community.hubspot.com/t/crm-object-level-access-control-for-private-apps/91549/7 "2023-10-13T07:37:28Z")
Yes it does solve the problem, thank you for your support. Just to make sure my understanding is correct. Since the private app is registered by a Super-admin the app will be able to access all deals created for that seller organization. There is no way to restrict the access to specific deals for the app.