Hi Community, i seeing some Apps with Access to individual. Can you share some details/documentations on how developers can build it, how the auths will works ?? ! TIA
PS: Access type : Personal
Hey @ramkumar1021,
Great question! The dev docs should have what you need around building and authentication. A few resources that should help point you in the right direction:
Tagging in a few folks who know this space well and may be able to further assist:
Hey @Alex_Boissonneault, @evaldas, @GiantFocal – do you have any suggestions for @ramkumar1021 on this?
Thank in advance!!
Sam, Community Manager
Hey @ramkumar1021, nice to see you here…
@stassey’s links are solid for the general OAuth side, but i think the thing you’re actually pointing at is a bit more specific. That “Access: Individual” you see on some marketplace apps means the app is built with user-level access, so every user in the portal connects the app themselves and only gets what their own HubSpot permissions allow, instead of one admin installing it for the whole account.
There’s a dedicated doc for exactly this (it’s still in beta, so the docs are a bit thin in places): Configure user-level access for an app - HubSpot docs
Hope it helps!
I haven’t implemented this yet or come across an app using this exact setup, but based on my understanding, I think the idea is to validate the current user’s HubSpot permissions before allowing the app functionality to proceed.
For example, if the app is going to create or modify custom properties, we could first check whether the current user has the required permissions to perform that operation. If they do, the app proceeds; otherwise, we restrict or prevent that functionality.
Please let me know if you’re referring to something different here.
I hope this helps you out. Please mark it as Solution Accepted and Like to help another Community member.
This post was created with the assistance of AI tools
Thanks!
@Alex_Boissonneault Thanks for the reference. Sure will look into it. Once more things, (out of this topic) do hubspot have any plans for better security mechanisms creds storage (for sensitive tokens), hmac with IP allowlist hubspot.fetch) for better security. In my opinion hmac alone isn’t good security method.
I’m also interested in this. It would be helpful to see an example of how individual access is configured, especially how authentication and user authorization work for these types of HubSpot apps.
check out this reply How to build App with individual access - #4 by Alex_Boissonneault