# Insufficient scopes were provided

**URL:** <https://community.hubspot.com/t/insufficient-scopes-were-provided/70225>\
**Category:** APIs & Integrations\
**Tags:** oauth\
**Created:** [November 30, 2022, 8:25am UTC](https://community.hubspot.com/t/insufficient-scopes-were-provided/70225 "2022-11-30T08:25:48Z")\
**Posts on this page:** 10\
**Page:** 1

<div class="post-metadata">

**Author:** ![eagiraldor](https://avatars.discourse-cdn.com/v4/letter/e/6f9a4e/32.png) [@eagiraldor](https://community.hubspot.com/u/eagiraldor)\
**Post date:** [November 30, 2022, 8:25am UTC](https://community.hubspot.com/t/insufficient-scopes-were-provided/70225/1 "2022-11-30T08:25:48Z")

</div>

I’m creating a public app for an integration but im still getting this error once i try to install the app.

![eagiraldor_0-1669796552924.png](https://d2qpr2jzcazej7.cloudfront.net/original/3X/c/0/c0747e31e23d063536e70a7922cbd2d1073db77b.png)

The URL is:  
[https://app.hubspot.com/oauth/23477576/authorize?scope=crm.objects.owners.read+crm.objects.contacts.write+crm.objects.companies.write+crm.objects.companies.read+crm.lists.read+crm.schemas.contacts.read+crm.objects.contacts.read+crm.schemas.companies.read&optional\_scope=forms+tickets+automation+crm.schemas.deals.read+crm.objects.deals.read+crm.objects.deals.write+crm.lists.read+content&client\_id=545f27e5-53c5-48ec-8002-5605ecaf3d78&redirect\_uri=https%3A%2F%2Fwww.crmperks.com%2Fsf\_auth%2F](https://app.hubspot.com/oauth/23477576/authorize?scope=crm.objects.owners.read+crm.objects.contacts.write+crm.objects.companies.write+crm.objects.companies.read+crm.lists.read+crm.schemas.contacts.read+crm.objects.contacts.read+crm.schemas.companies.read&optional_scope=forms+tickets+automation+crm.schemas.deals.read+crm.objects.deals.read+crm.objects.deals.write+crm.lists.read+content&client_id=545f27e5-53c5-48ec-8002-5605ecaf3d78&redirect_uri=https%3A%2F%2Fwww.crmperks.com%2Fsf_auth%2F)  
And my scopes on app are those:

 ![eagiraldor_1-1669796711741.png](https://d2qpr2jzcazej7.cloudfront.net/original/3X/6/b/6b5f2b1f398da92a6c142fff4a069579909f80e2.png)

Can someone help me to understand why is not working?

---

<div class="post-metadata">

**Author:** ![skimura](https://avatars.discourse-cdn.com/v4/letter/s/9de053/32.png) [@skimura](https://community.hubspot.com/u/skimura)\
**Post date:** [November 30, 2022, 9:19am UTC](https://community.hubspot.com/t/insufficient-scopes-were-provided/70225/2 "2022-11-30T09:19:45Z")

</div>

@eagiraldor

Hi.

I think your ‘URL’ scope is insufficient.

URL’s scopes: 8

app scpoes: 16

Your ‘authorize URL’ is copy from app ‘Auth settings’?

If not, please copy and use this.

 ![スクリーンショット 2022-11-30 18.11.18.png](https://d2qpr2jzcazej7.cloudfront.net/original/3X/8/1/817c700f34ed2516986eec5360c5350a1ab5bc19.png)

Thanks.

---

<div class="post-metadata">

**Author:** ![eagiraldor](https://avatars.discourse-cdn.com/v4/letter/e/6f9a4e/32.png) [@eagiraldor](https://community.hubspot.com/u/eagiraldor)\
**Post date:** [November 30, 2022, 3:28pm UTC](https://community.hubspot.com/t/insufficient-scopes-were-provided/70225/3 "2022-11-30T15:28:25Z")

</div>

Tried with the one provided from Auth settings and still the same (this is one created from a plugin provider) but i get same response with both URLs.  
Also tried to remove the scopes from “optional scopes” and is the same

---

<div class="post-metadata">

**Author:** ![skimura](https://avatars.discourse-cdn.com/v4/letter/s/9de053/32.png) [@skimura](https://community.hubspot.com/u/skimura)\
**Post date:** [December 1, 2022, 5:28am UTC](https://community.hubspot.com/t/insufficient-scopes-were-provided/70225/4 "2022-12-01T05:28:45Z")

</div>

@eagiraldor

‘the one provided from Auth settings’

Can you paste the authorize url? ( copy from app setting )

URL ‘scopes’ count is same as app 'selected scopes?

Thanks.

---

<div class="post-metadata">

**Author:** ![eagiraldor](https://avatars.discourse-cdn.com/v4/letter/e/6f9a4e/32.png) [@eagiraldor](https://community.hubspot.com/u/eagiraldor)\
**Post date:** [December 1, 2022, 7:14am UTC](https://community.hubspot.com/t/insufficient-scopes-were-provided/70225/5 "2022-12-01T07:14:39Z")

</div>

This is the one copied from auth tab:  
[https://app.hubspot.com/oauth/authorize?client\_id=545f27e5-53c5-48ec-8002-5605ecaf3d78&redirect\_uri=https://www.crmperks.com/sf\_auth/&scope=content%20automation%20oauth%20forms%20tickets%20crm.lists.read%20crm.objects.contacts.read%20crm.objects.contacts.write%20crm.objects.companies.write%20crm.schemas.contacts.read%20crm.objects.companies.read%20crm.objects.deals.read%20crm.objects.deals.write%20crm.schemas.companies.read%20crm.schemas.deals.read%20crm.objects.owners.read](https://app.hubspot.com/oauth/authorize?client_id=545f27e5-53c5-48ec-8002-5605ecaf3d78&redirect_uri=https://www.crmperks.com/sf_auth/&scope=content%20automation%20oauth%20forms%20tickets%20crm.lists.read%20crm.objects.contacts.read%20crm.objects.contacts.write%20crm.objects.companies.write%20crm.schemas.contacts.read%20crm.objects.companies.read%20crm.objects.deals.read%20crm.objects.deals.write%20crm.schemas.companies.read%20crm.schemas.deals.read%20crm.objects.owners.read)  
Still causes the same message

---

<div class="post-metadata">

**Author:** ![skimura](https://avatars.discourse-cdn.com/v4/letter/s/9de053/32.png) [@skimura](https://community.hubspot.com/u/skimura)\
**Post date:** [December 1, 2022, 8:04am UTC](https://community.hubspot.com/t/insufficient-scopes-were-provided/70225/6 "2022-12-01T08:04:22Z")

</div>

@eagiraldor

Thank you for auth URL.

URL scopes is same as app scopes.

so, Is your account has required scopes?

please check below.

[https://community.hubspot.com/t5/APIs-Integrations/Insufficient-scopes-were-provided-Please-contact-the-app/m-p/489716](https://community.hubspot.com/t5/APIs-Integrations/Insufficient-scopes-were-provided-Please-contact-the-app/m-p/489716)

If you can authorize with minimum scopes (like ‘tickets’ only ),

your account doesn’t have enough scopes.

---

<div class="post-metadata">

**Author:** ![eagiraldor](https://avatars.discourse-cdn.com/v4/letter/e/6f9a4e/32.png) [@eagiraldor](https://community.hubspot.com/u/eagiraldor)\
**Post date:** [December 1, 2022, 3:10pm UTC](https://community.hubspot.com/t/insufficient-scopes-were-provided/70225/7 "2022-12-01T15:10:04Z")

</div>

Thanks!  
Where i can check or change account scopes?

---

<div class="post-metadata">

**Author:** ![skimura](https://avatars.discourse-cdn.com/v4/letter/s/9de053/32.png) [@skimura](https://community.hubspot.com/u/skimura)\
**Post date:** [December 2, 2022, 12:19am UTC](https://community.hubspot.com/t/insufficient-scopes-were-provided/70225/8 "2022-12-02T00:19:48Z")

</div>

@eagiraldor

Please check this.

> **[Manage user permissions](https://knowledge.hubspot.com/user-management/manage-user-permissions)**
>
> Learn how to make changes to permissions for users in your HubSpot account. You can do this individually or in bulk.

Please search your own account, and check your permission.

---

<div class="post-metadata">

**Author:** ![eagiraldor](https://avatars.discourse-cdn.com/v4/letter/e/6f9a4e/32.png) [@eagiraldor](https://community.hubspot.com/u/eagiraldor)\
**Post date:** [December 2, 2022, 3:14pm UTC](https://community.hubspot.com/t/insufficient-scopes-were-provided/70225/9 "2022-12-02T15:14:41Z")

</div>

Hi @skimura  
I’m already a super admin, so i should have all permissions

---

<div class="post-metadata">

**Author:** ![eagiraldor](https://avatars.discourse-cdn.com/v4/letter/e/6f9a4e/32.png) [@eagiraldor](https://community.hubspot.com/u/eagiraldor)\
**Post date:** [December 5, 2022, 2:15pm UTC](https://community.hubspot.com/t/insufficient-scopes-were-provided/70225/10 "2022-12-05T14:15:16Z")

</div>

The fix was remove all scopes on app and add just in install URL
