# owner

**URL:** <https://community.hubspot.com/t/owner/81863>\
**Category:** APIs & Integrations\
**Tags:** object\
**Created:** [May 24, 2023, 5:40am UTC](https://community.hubspot.com/t/owner/81863 "2023-05-24T05:40:20Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![SMehta7](https://avatars.discourse-cdn.com/v4/letter/s/df788c/32.png) [@SMehta7](https://community.hubspot.com/u/SMehta7)\
**Post date:** [May 24, 2023, 5:40am UTC](https://community.hubspot.com/t/owner/81863/1 "2023-05-24T05:40:20Z")

</div>

while calling owners API from the code do we have to give any etc permission, if we are using Private access token.

---

<div class="post-metadata">

**Author:** ![Jaycee\_Lewis](https://d10pqhm3lwygmk.cloudfront.net/user_avatar/community.hubspot.com/jaycee_lewis/32/61352_2.png) [@Jaycee\_Lewis](https://community.hubspot.com/u/Jaycee_Lewis)\
**Post date:** [May 24, 2023, 6:30pm UTC](https://community.hubspot.com/t/owner/81863/2 "2023-05-24T18:30:15Z")

</div>

Hey, @SMehta7 👋 Thanks for your question. To confirm, you are asking about the needed scopes to use the [CRM API | Owners endpoints](https://developers.hubspot.com/docs/api/crm/owners), correct?

Either of:

- **GET** `/crm/v3/owners/`
- **GET** `/crm/v3/owners/{ownerId}`

If so, both require the scope of **crm.objects.owners.read**. You can also find this info here — Working with OAuth | [Owners Endpoints](https://developers.hubspot.com/docs/api/working-with-oauth#:~:text=a%20CRM%20record.-,Owners%20endpoints,-Any%20account). This applies to Privates Apps scopes as well.

 ![CleanShot 2023-05-24 at 12.25.22.png](https://d2qpr2jzcazej7.cloudfront.net/original/3X/c/4/c49a8ca6a63673864b7f4eb1748ca5a40d4e4ff0.png)

Have fun building! — Jaycee