Google Calendar integration permissions: Why???

[Stobber]

I just tried to connect HubSpot CRM to my Google Calendar account. Google warned me of the list of permissions HubSpot was requesting.

Looks like HubSpot wants access to everything I do in my company through G Suite. Why do you need access to my Drive, all my email, my Spreadsheets, etc just to sync with my calendar?

I want to use more integrations, but I'm not ready to give you a camera and lift up my skirt, so to speak.

[AndreaGabriel]

For me, the issue is that Hubspot wants connection to my Drive folders. There is no way I can give access to the Drive. Would love to connect my calendar, but opening up Drive folders is so not necessary, and a total no go for me.

[AndreaGabriel]

Also, why is this issue marked as "solved"?

[dwf]

Could a Hubspot exec let us know why this is being ignored? 

[Morten_Olsson]

This thread is marked as solved, even though it is not solved at all. @PamCotton could you please escalate this issue? It is vexing that HubSpot does not take a stance here.

[evilon]

Joining the choir. Please request permissions only what is absolutely necessary for the task at hand. 

[CE]

if you could also opine on https://community.hubspot.com/t5/HubSpot-Ideas/Google-Advanced-Protection/idi-p/462773, perhaps it would help increasing the overall security/privacy profile of HubSpot.

[JHassell]

We are having the same concern. Will this blanket permission access be changing? 

[Morten_Olsson]

It looks like this thread has been hijacked by a completely different issue. Can we get it back in line with the original post, please?

I find it deeply saddening, that the original issue is yet to be adressed after more than two years. It is simply incredible, that the calendar integration can't function without granting HubSpot full permissions to our Google Drive files - something that is never ever going to happen.

The files on our Google Drive includes design documents for national critical IT-services for our country. We would be mad to give HubSpot access to those.

Can we please, pretty please get an official reply from HubSpot: Is this something that you will be addressing? If so, when? Do you even understand how incredibly bad information security practice it is, for your customers, to grant HubSpot the aforementioned priviledges?

In short: We would really really like calendar integration with our Google Calendar. But as long as HubSpot requests access to our entire Google Drive, that just won't happen.

Best Regards

Morten Olsson

Marketing Manager

Netic A/S

[CE]

@Goulven @jacobjoseph 

Please consider asking your security team to upvote the is feature request for HubSpot to work with Google Advanced Protection. It seems like it would solve many of the issues present in this thread.

https://community.hubspot.com/t5/HubSpot-Ideas/Google-Advanced-Protection/idi-p/462773

[dwf]

Two years later and this is still an open issue? One of the reasons for buying into Hubspot was an "all-in-one" solution. Now I need to use Calendly (which does not require access to everything). One or two more caveats like this and my company will find an alternative to Hubspot.   

[jacobjoseph]

Yes, we had to use Calendly for the same reason. Definitely frustrating to have to pay for an additional service due to lax security rules.

[MSHABBIR]

LOL we are using Calendly just because of that. I'm not giving them access to all my emails just to sync my calendar. The first response is also very dumb in my opinion. You can just request access as users want features and not have a blanket coverage.

[AllanG]

I cannot belive this isn't solved yet. Can someone please give the simple reason. Is it: 

1. You can't technically figure out how to do it? (Which shouldn't be the case, because comapnies like Zoom only need access to Google Calendar - not the entire suite)

2. You don't care that this is a major concern to customers?

3. It's just easier to only ask once for permission to Google?

4. The access to more data is more important than customer concerns?

I feel lke it has to be one of those answers...but if not, please let us know. This one hurdle is stopping many companies from fully utilizing the features of the platform, and also just feels like a data overeach for no legitimate reason (again, unless you're telling us it's just not technically possible) - in that case, can we schedule a call with the Zoom tech team?

[PamCotton]

Hello @Goulven, as the article above mentions: When you connect a calendar to the meetings tool, the associated inbox will automatically connect in your email integration settings. However, once your calendar is integrated, you can disable the inbox connection without disabling the calendar connection.

As I see an error while you trying to connect your inbox in HubSpot you will need to ensure this inbox is connected correctly first before connecting your calendar. 

If you connect a google calendar to meetings, it will also connect and enable that inbox in your email integrations.

Kindly,

Pam

[Goulven]

Hello @PamCotton,

I followed your instructions and tried to reconnect my inbox.

Here is the technical error stack:

GmailSubscriptionError{type=INITIAL_WATCH, error=googleApiErrorForApiRequest(GoogleApiError{error=ErrorBody{errors=[Error{domain=global, reason=failedPrecondition, message=Mail service not enabled}], code=400, message=Mail service not enabled}})}

This error message totally makes sense as I don't have Gmail service. I'm using ProtonMail, an end-to-end encrypted email service.

I tried to delete the inbox and recreate it, but I got the same error.

It seems like Hubspot is incompatible with services like ProtonMail. Do you confirm?

Do you know another CRM I could use instead?

Regards,

[PamCotton]

Hello @Goulven, I was not able to see the error on our end while trying to connect the inbox, but here is some more information about ProtonMail.

You will be able to connect your ProtonMail inbox to HubSpot. While it's not natively possible to connect a ProtonMail inbox, as it doesn't allow for inbox connections via IMAP and SMTP, there is a ProtonMail Bridge that would enable you to connect your inbox to HubSpot this way. But, do note that this is only available with a paid ProtonMail subscription.

Kindly,

Pam

[Goulven]

Hello @PamCotton ,

ProtonMail Bridge is installed locally and decrypts mails for app installed locally such as Outlook or Thunderbird. So, you're telling me that HubSpot has a desktop client? I'm interested, where can I download it?

[PamCotton]

Hey @Goulven just to clarify, 

1. Currently, we don’t have an email client or have an extension for ProtonMail. We only have the three Sales extensions/add-ins.
2. You should be able to connect your proton mail inbox using your ProtonBridge feature which should give you IMAP/SMTP settings to enter to connect ( more information here)

We don't have resources in HubSpot on that currently but the document above should help.

Kindly,

Pam

[Goulven]

@PamCotton,

Did you read the ProtonMail Bridge documentation? IMAP/SMTP settings provided by ProtonMail Bridge are for local only: 127.0.0.1.

Please tell me how HubSpot is supposed to reach this IP address?

Unless deploying this bridge on a dedicated server and exposing ports 1025/1143, but I definitely won't do that.

[PamCotton]

Hello @Goulven I just confirmed with our team, and you are correct, those are local IPs that won’t work with our IMAP inbox connection. Your IMAP and SMTP servers need to be accessible over the public internet in order to connect with HubSpot. We cannot advise you further on the technical implementation.

Kindly,

Pam