403 user does not have permissions to authorize scopes

oauth
contacts

#1

Hi,

When attempting to install our app into a free CRM account, we are getting:

The request response is this:

The only scope the app is requesting is "Contacts". The OAuth authorize request we fire is:

https://app.hubspot.com/oauth/authorize?
client_id=ac6c0b70-fe26-4eba-b919-a8ebb1f8214d
&redirect_uri=https%3A%2F%2Fgo.zoominfo.com%2Fanura%2Foauth2%2Fcallback
&response_type=code
&scope=contacts
&resource=contacts
&state=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1c2VySWQiOiJwbndLOUsxb1hFIiwiY2xpZW50RG9tYWluIjoiaHR0cHM6Ly9nby56b29taW5mby5jb20iLCJ0eXBlIjoiaHVic3BvdCIsInJlc291cmNlIjoiIiwiaWF0IjoxNTM0ODcxODY0LCJleHAiOjE1MzQ4NzU0NjR9.NszJknb84sSKkmcYMkLD9RQVi0nFONYuiRbDNBmJeGk

The user who is trying to authorize IS and admin ( but NOT a Super Admin ):



This is my free CRM:

I have already scanned the forum and read many posts, these ones are the closest to my issue but I was not able to resolve my issue reading everything and trying out some things:

https://integrate.hubspot.com/t/uh-oh-you-do-not-have-the-correct-role-to-grant-these-permissions-please-contact-your-administrator/8600/4

https://integrate.hubspot.com/t/scope-to-authorize-sales-user-from-a-app/2129/2

https://integrate.hubspot.com/t/hubspot-integration-app-problem-you-do-not-have-the-correct-role-to-grant-these-permissions-please-contact-your-administrator/6897

Any ideas for what I might be doing wrong?
-Assaf


#2

hitting the owners endpoint I get this response:

[  
   {  
      "portalId":4845447,
      "ownerId":33330298,
      "type":"PERSON",
      "firstName":"Assaf",
      "lastName":"Zoom",
      "email":"#############",
      "createdAt":1534867236729,
      "updatedAt":1534867237067,
      "remoteList":[  
         {  
            "id":28700724,
            "portalId":4845447,
            "ownerId":33330298,
            "remoteId":"6429948",
            "remoteType":"HUBSPOT",
            "active":true
         }
      ],
      "hasContactsAccess":false
   },
   {  
      "portalId":4845447,
      "ownerId":33330413,
      "type":"PERSON",
      "firstName":"Assaf",
      "lastName":"Test",
      "email":"#############",
      "createdAt":1534869109843,
      "updatedAt":1534869109843,
      "remoteList":[  
         {  
            "id":28701016,
            "portalId":4845447,
            "ownerId":33330413,
            "remoteId":"6424954",
            "remoteType":"HUBSPOT",
            "active":true
         }
      ],
      "hasContactsAccess":false
   }
]

looks like hasContactsAccess is false for all users, might this be related?


#3

Hi @assafzoom,

This is related to a known issue with the way the contacts scope interacts with Marketing/CRM Free portals. Currently, only a Super Admin can authorize the contacts scope. For the time being, I'd recommend having a Super Admin authorize your integration.


Get owners API throws 403 forbidden