@VVarshney there’s an update here, a private beta which you can find under Settings > Product updates > All updates. (If it’s not there, you’ll have to be patient a bit longer until it exits private beta status.)
APIs
Public Permissions API
January 21, 2025
What is it?
We’ve introduced an API that returns a list of users with access to a specific object ID.
Why does it matter?
This update supports those who want to know what users have access to each object, so that HubSpot data can be better leveraged in products.
How does it work?
The primary exposed endpoint is the “Permitted Users” endpoint, which given a list of resources in the form of HCRNs (spec below) responds with a list of actions and permitted user ids for those actions. Initially this will only support CRM objects.
Example:
`GET https://private.hubapi.com/resource-permissions/v3/permitted-users?resource=hcrn:48344777:crm-object:0-3:29672272530\`
----
{
“resources”: {
“hcrn:48344777:crm-object:0-3:29672272530”: {
“crm-object:COMMUNICATE”: {
“action”: “crm-object:COMMUNICATE”,
“permittedUsers”: [74855373,74855416,74954882 ]
},
“crm-object:EDIT”: {
“action”: “crm-object:EDIT”,
“permittedUsers”: [74855373,74855416,74954882]
},
“crm-object:VIEW”: {
“action”: “crm-object:VIEW”,
“permittedUsers”: [74855373,74855416,74954882]
},
“crm-object:DELETE”: {
“action”: “crm-object:DELETE”,
“permittedUsers”: [74855373,74855416,74954882]
}
}
}
}
----
HCRN Spec:
hcrn:<portalId>:<resourceType>:[resourceTypeId]:[resourceId]/[subResource]
For CRM objects the subResource is unused and should be omitted. The portalId should be self explanatory. The resourceType will always be “crm-object”. The resourceTypeId is the object type ID and the resourceId is the object ID.
Example:
hcrn:48344777:crm-object:0-3:29672272530
Who gets it?
All Hubs and Editions