# Regarding Permission API

**URL:** <https://community.hubspot.com/t/regarding-permission-api/118762>\
**Category:** CRM\
**Tags:** starter\
**Created:** [October 21, 2024, 5:27am UTC](https://community.hubspot.com/t/regarding-permission-api/118762 "2024-10-21T05:27:56Z")\
**Posts on this page:** 20\
**Page:** 1

<div class="post-metadata">

**Author:** ![VVarshney](https://avatars.discourse-cdn.com/v4/letter/v/bb73d2/32.png) [@VVarshney](https://community.hubspot.com/u/VVarshney)\
**Post date:** [October 21, 2024, 5:27am UTC](https://community.hubspot.com/t/regarding-permission-api/118762/1 "2024-10-21T05:27:56Z")

</div>

Hi,  
Greetings for the day.

Is there any way where I can get access to Permission API. I am already using Starter pack and Marketing hub is on trail. Just wanted to check If I upgrade my account to Enterprise edition, will I be able to get Permission API.  
Thanks

---

<div class="post-metadata">

**Author:** ![karstenkoehler](https://d10pqhm3lwygmk.cloudfront.net/user_avatar/community.hubspot.com/karstenkoehler/32/68554_2.png) [@karstenkoehler](https://community.hubspot.com/u/karstenkoehler)\
**Post date:** [October 21, 2024, 5:32am UTC](https://community.hubspot.com/t/regarding-permission-api/118762/2 "2024-10-21T05:32:03Z")

</div>

Hi @VVarshney,

The user provisioning / users API should be accessible on a Starter subscription already: [Accounts Dashboard | HubSpot](https://developers.hubspot.com/docs/api/settings/user-provisioning)

Is there something specific that’s not working for you right now?

If you’re referring to permission **sets** specifically, correct, that would require any Enterprise subscription: [Create and assign permission sets](https://knowledge.hubspot.com/user-management/create-permission-sets)

Best regards

---

<div class="post-metadata">

**Author:** ![VVarshney](https://avatars.discourse-cdn.com/v4/letter/v/bb73d2/32.png) [@VVarshney](https://community.hubspot.com/u/VVarshney)\
**Post date:** [October 21, 2024, 5:50am UTC](https://community.hubspot.com/t/regarding-permission-api/118762/3 "2024-10-21T05:50:24Z")

</div>

Hi @karstenkoehler ,  
With user provisioning api also, I am not able to retrieve user permissions. It is providing me user details but not permissions.  
I want to retrieve user permissions via API.

The document link which you have provided I can see that it is through UI.

If you can help me out with this, it would be great!

Thanks!

---

<div class="post-metadata">

**Author:** ![karstenkoehler](https://d10pqhm3lwygmk.cloudfront.net/user_avatar/community.hubspot.com/karstenkoehler/32/68554_2.png) [@karstenkoehler](https://community.hubspot.com/u/karstenkoehler)\
**Post date:** [October 21, 2024, 5:52am UTC](https://community.hubspot.com/t/regarding-permission-api/118762/4 "2024-10-21T05:52:16Z")

</div>

@VVarshney which endpoint exactly are you using? Which status code / response are you getting?

---

<div class="post-metadata">

**Author:** ![VVarshney](https://avatars.discourse-cdn.com/v4/letter/v/bb73d2/32.png) [@VVarshney](https://community.hubspot.com/u/VVarshney)\
**Post date:** [October 21, 2024, 6:01am UTC](https://community.hubspot.com/t/regarding-permission-api/118762/5 "2024-10-21T06:01:48Z")

</div>

I am using this endpoint-  
[https://api.hubapi.com/crm/v3/objects/users](https://api.hubapi.com/crm/v3/objects/users)  
Response: {  
“id”: “373077915434”,  
“properties”: {  
“hs\_createdate”: “2024-10-14T07:24:56.629Z”,  
“hs\_lastmodifieddate”: “2024-10-16T04:51:06.886Z”,  
“hs\_object\_id”: “373077915434”  
},  
“createdAt”: “2024-10-14T07:24:56.629Z”,  
“updatedAt”: “2024-10-16T04:51:06.886Z”,  
“archived”: false  
},  
Here I want to retrieve user permissions.

I tried with Teams and Owner API too.  
Thanks!

---

<div class="post-metadata">

**Author:** ![karstenkoehler](https://d10pqhm3lwygmk.cloudfront.net/user_avatar/community.hubspot.com/karstenkoehler/32/68554_2.png) [@karstenkoehler](https://community.hubspot.com/u/karstenkoehler)\
**Post date:** [October 21, 2024, 6:12am UTC](https://community.hubspot.com/t/regarding-permission-api/118762/6 "2024-10-21T06:12:09Z")

</div>

@VVarshney I’m not sure I’m following - which exact endpoint are you using and what request are you making? [Accounts Dashboard | HubSpot](https://developers.hubspot.com/docs/api/settings/user-provisioning)

GET /settings/v3/users/

POST /settings/v3/user/

…?

Maybe there is also a misunderstanding about “retrieving user permissions”, what exactly are you expecting in the response?

---

<div class="post-metadata">

**Author:** ![VVarshney](https://avatars.discourse-cdn.com/v4/letter/v/bb73d2/32.png) [@VVarshney](https://community.hubspot.com/u/VVarshney)\
**Post date:** [October 21, 2024, 6:20am UTC](https://community.hubspot.com/t/regarding-permission-api/118762/7 "2024-10-21T06:20:26Z")

</div>

Hi @karstenkoehler ,  
Actually I want to get info about user roles and permissions.  
The endpoint which you mentioned is returning static data only i.e. It is only returning one permission. But I want to get all the roles and permissions which particular user have.

I hope that I am able to make you understand my point.

Thankyou.

---

<div class="post-metadata">

**Author:** ![karstenkoehler](https://d10pqhm3lwygmk.cloudfront.net/user_avatar/community.hubspot.com/karstenkoehler/32/68554_2.png) [@karstenkoehler](https://community.hubspot.com/u/karstenkoehler)\
**Post date:** [October 21, 2024, 6:21am UTC](https://community.hubspot.com/t/regarding-permission-api/118762/8 "2024-10-21T06:21:21Z")

</div>

@VVarshney a user can only have one role. Can you give me an example?

---

<div class="post-metadata">

**Author:** ![VVarshney](https://avatars.discourse-cdn.com/v4/letter/v/bb73d2/32.png) [@VVarshney](https://community.hubspot.com/u/VVarshney)\
**Post date:** [October 21, 2024, 6:29am UTC](https://community.hubspot.com/t/regarding-permission-api/118762/9 "2024-10-21T06:29:21Z")

</div>

Let me explain with an example:  
I have created a user named Vaishali Varshney and have assigned CMS developer permission set to this user. It is having access such as Account, contacts and marketing.  
Now, I want to retrieve this information via API.  
So how can I do it?  
I hope that you are able to understand my point.

Thankyou.

---

<div class="post-metadata">

**Author:** ![karstenkoehler](https://d10pqhm3lwygmk.cloudfront.net/user_avatar/community.hubspot.com/karstenkoehler/32/68554_2.png) [@karstenkoehler](https://community.hubspot.com/u/karstenkoehler)\
**Post date:** [October 21, 2024, 6:32am UTC](https://community.hubspot.com/t/regarding-permission-api/118762/10 "2024-10-21T06:32:31Z")

</div>

@VVarshney I might be missing something but as far as I can tell, there isn’t any endpoint which would give you that information.

---

<div class="post-metadata">

**Author:** ![VVarshney](https://avatars.discourse-cdn.com/v4/letter/v/bb73d2/32.png) [@VVarshney](https://community.hubspot.com/u/VVarshney)\
**Post date:** [October 21, 2024, 6:43am UTC](https://community.hubspot.com/t/regarding-permission-api/118762/11 "2024-10-21T06:43:27Z")

</div>

Hi @karstenkoehler ,  
So if we upgrade our account to Enterprise edition, will we be able to fetch these details?  
Like is there any way through which we can get these details via API.

Thankyou.

---

<div class="post-metadata">

**Author:** ![karstenkoehler](https://d10pqhm3lwygmk.cloudfront.net/user_avatar/community.hubspot.com/karstenkoehler/32/68554_2.png) [@karstenkoehler](https://community.hubspot.com/u/karstenkoehler)\
**Post date:** [October 21, 2024, 6:44am UTC](https://community.hubspot.com/t/regarding-permission-api/118762/12 "2024-10-21T06:44:11Z")

</div>

@VVarshney no, I don’t see how the Enterprise subscription level would change that.

---

<div class="post-metadata">

**Author:** ![VVarshney](https://avatars.discourse-cdn.com/v4/letter/v/bb73d2/32.png) [@VVarshney](https://community.hubspot.com/u/VVarshney)\
**Post date:** [October 21, 2024, 8:49am UTC](https://community.hubspot.com/t/regarding-permission-api/118762/13 "2024-10-21T08:49:22Z")

</div>

Hi @karstenkoehler ,  
So correct me If I am wrong, There is no way to fetch user permissions or details from the given APIs in the document.  
Even enterprise edition won’t help in getting those details.

There is no such API available in the open source.

Thanks!

---

<div class="post-metadata">

**Author:** ![karstenkoehler](https://d10pqhm3lwygmk.cloudfront.net/user_avatar/community.hubspot.com/karstenkoehler/32/68554_2.png) [@karstenkoehler](https://community.hubspot.com/u/karstenkoehler)\
**Post date:** [October 21, 2024, 8:50am UTC](https://community.hubspot.com/t/regarding-permission-api/118762/14 "2024-10-21T08:50:34Z")

</div>

@VVarshney as far as I can tell from the API documentation, correct.

---

<div class="post-metadata">

**Author:** ![VVarshney](https://avatars.discourse-cdn.com/v4/letter/v/bb73d2/32.png) [@VVarshney](https://community.hubspot.com/u/VVarshney)\
**Post date:** [October 21, 2024, 9:15am UTC](https://community.hubspot.com/t/regarding-permission-api/118762/15 "2024-10-21T09:15:58Z")

</div>

Hi @karstenkoehler ,  
If not API, is there any other way through which we can retreive those details. Can we try it via DB?  
Note that we have tried connecting it with CData but didn’t got any of the details.

Thankyou.

---

<div class="post-metadata">

**Author:** ![VVarshney](https://avatars.discourse-cdn.com/v4/letter/v/bb73d2/32.png) [@VVarshney](https://community.hubspot.com/u/VVarshney)\
**Post date:** [October 22, 2024, 6:53am UTC](https://community.hubspot.com/t/regarding-permission-api/118762/16 "2024-10-22T06:53:31Z")

</div>

Hi @karstenkoehler ,  
Is there any document where it is mentioned that there is no way to retrieve the user role and permissions?  
Thankyou.

---

<div class="post-metadata">

**Author:** ![karstenkoehler](https://d10pqhm3lwygmk.cloudfront.net/user_avatar/community.hubspot.com/karstenkoehler/32/68554_2.png) [@karstenkoehler](https://community.hubspot.com/u/karstenkoehler)\
**Post date:** [October 22, 2024, 6:57am UTC](https://community.hubspot.com/t/regarding-permission-api/118762/17 "2024-10-22T06:57:50Z")

</div>

@VVarshney I’m not seeing it in the Endpoints tab on these two pages:

> **[Accounts Dashboard | HubSpot](https://app.hubspot.com/myaccounts?next=developerdocs&redirect=%2Fapi-reference%2Fsettings-user-provisioning-v3%2Fguide)**

> **[Accounts Dashboard | HubSpot](https://app.hubspot.com/myaccounts?next=developerdocs&redirect=%2Fapi-reference%2Fcrm-users-v3%2Fguide)**

It’s not going to specify that something is not available – instead it’s simply not going to be a listed endpoint. If it’s not listed, then as far as I can tell, it’s not available.

---

<div class="post-metadata">

**Author:** ![VVarshney](https://avatars.discourse-cdn.com/v4/letter/v/bb73d2/32.png) [@VVarshney](https://community.hubspot.com/u/VVarshney)\
**Post date:** [October 24, 2024, 11:48am UTC](https://community.hubspot.com/t/regarding-permission-api/118762/18 "2024-10-24T11:48:05Z")

</div>

Hi @karstenkoehler ,  
I have found Permission API from Hubspot Network but that API is available on version 1.  
Endpoint reference- [https://app.hubspot.com/api/app-users/v1/users?portalId=42592887&clienttimeout=14000&hs\_static\_app=settings-ui-users&hs\_static\_app\_version=1.46494](https://app.hubspot.com/api/app-users/v1/users?portalId=42592887&clienttimeout=14000&hs_static_app=settings-ui-users&hs_static_app_version=1.46494)

Could you please let me know if this API is depreciated or not?  
Thankyou.

---

<div class="post-metadata">

**Author:** ![karstenkoehler](https://d10pqhm3lwygmk.cloudfront.net/user_avatar/community.hubspot.com/karstenkoehler/32/68554_2.png) [@karstenkoehler](https://community.hubspot.com/u/karstenkoehler)\
**Post date:** [October 24, 2024, 11:57am UTC](https://community.hubspot.com/t/regarding-permission-api/118762/19 "2024-10-24T11:57:25Z")

</div>

@VVarshney I can’t find anything in the documentation about this endpoint. If you want to check whether this is deprecated, I’d recommend with HubSpot support.

---

<div class="post-metadata">

**Author:** ![karstenkoehler](https://d10pqhm3lwygmk.cloudfront.net/user_avatar/community.hubspot.com/karstenkoehler/32/68554_2.png) [@karstenkoehler](https://community.hubspot.com/u/karstenkoehler)\
**Post date:** [January 22, 2025, 5:14am UTC](https://community.hubspot.com/t/regarding-permission-api/118762/20 "2025-01-22T05:14:53Z")

</div>

@VVarshney there’s an update here, a private beta which you can find under _Settings_ \> _Product updates_ \> _All updates_. (If it’s not there, you’ll have to be patient a bit longer until it exits private beta status.)

> * * *
> 
> APIs
> 
> ### Public Permissions API
> 
> January 21, 2025
> 
> ### **What is it?**
> 
> We’ve introduced an API that returns a list of users with access to a specific object ID.
> 
> ### **Why does it matter?**
> 
> This update supports those who want to know what users have access to each object, so that HubSpot data can be better leveraged in products.
> 
> ### **How does it work?**
> 
> The primary exposed endpoint is the “Permitted Users” endpoint, which given a list of resources in the form of HCRNs (spec below) responds with a list of actions and permitted user ids for those actions. Initially this will only support CRM objects.
> 
> Example:
> 
> `GET [https://private.hubapi.com/resource-permissions/v3/permitted-users?resource=hcrn:48344777:crm-object:0-3:29672272530\`](https://private.hubapi.com/resource-permissions/v3/permitted-users?resource=hcrn:48344777:crm-object:0-3:29672272530%5C%60)
> 
> ----
> 
> {
> 
> “resources”: {
> 
> “hcrn:48344777:crm-object:0-3:29672272530”: {
> 
> “crm-object:COMMUNICATE”: {
> 
> “action”: “crm-object:COMMUNICATE”,
> 
> “permittedUsers”: [74855373,74855416,74954882]
> 
> },
> 
> “crm-object:EDIT”: {
> 
> “action”: “crm-object:EDIT”,
> 
> “permittedUsers”: [74855373,74855416,74954882]
> 
> },
> 
> “crm-object:VIEW”: {
> 
> “action”: “crm-object:VIEW”,
> 
> “permittedUsers”: [74855373,74855416,74954882]
> 
> },
> 
> “crm-object:DELETE”: {
> 
> “action”: “crm-object:DELETE”,
> 
> “permittedUsers”: [74855373,74855416,74954882]
> 
> }
> 
> }
> 
> }
> 
> }
> 
> ----
> 
> **HCRN Spec** :
> 
> hcrn:\<portalId\>:\<resourceType\>:[resourceTypeId]:[resourceId]/[subResource]
> 
> For CRM objects the subResource is unused and should be omitted. The portalId should be self explanatory. The resourceType will always be “crm-object”. The resourceTypeId is the object type ID and the resourceId is the object ID.
> 
> Example:
> 
> hcrn:48344777:crm-object:0-3:29672272530
> 
> ### **Who gets it?**
> 
> All Hubs and Editions
> 
> * * *
