Creating app with OAuth to push contacts without access to read data

[MatthewShepherd]

Hi,

I'm researching the best way for a third party to push contacts into our Hubspot CRM, without them having access to read any data from the CRM. I know I can do this using Zapier but I'd also like to know if this is possible by creating a Hubspot App.

If a Hubspot App is set up to use OAuth authentication, can scopes/permissions (user or app permissions) be restricted such that the app will only receive data and not provide access to contact / any other portal data?

Thanks,
Matthew

[cbarley]

Hi @dotdynamic, there's not a good way to do this. The inherent nature of an App in HubSpot requires that the integrator needs read and write access. The access token provides inherent access to update via POST or PUT, and GET any contact info. Zapier may be the best route if the integration with them works this way.