> ## Documentation Index
> Fetch the complete documentation index at: https://developers.hubspot.com/docs/llms.txt
> Use this file to discover all available pages before exploring further.
---
id: 65e9e85c-96d0-44ec-ab30-453973373be6
---
# Configure user-level access for an app
> Learn about how to manage user API access in your app using user-level access.
User-level access is an alternative, more granular option to the account-wide access apps grant to users in your HubSpot account.
## User-level vs. account-level access
Account-level access provides a uniform level of access for all users in your HubSpot account, while user-level access links your app's features and API access to the associated per-user permissions in your account.
When user-level access is set up, each user that meets your app's configured [scopes](/docs/apps/developer-platform/build-apps/authentication/scopes) that correspond to their [in-app permissions](https://knowledge.hubspot.com/user-management/hubspot-user-permissions-guide) can install the app.
If your app should behave differently based on who is using it, then you should opt for user-level access. Otherwise, account-level access remains the right choice for other use-cases such as account-wide automation, or syncing data across many tools in your account.
## Set up user-level access for your app
Before proceeding, make sure you're on the latest version of the HubSpot CLI (`8.15.0`), and that the `platformVersion` field is set to `2026.09` in your project's top-level `hsproject.json` file.
```json hsproject.json highlight={4} theme={null}
{
"name": "my_user_level_access_project",
"srcDir": "src",
"platformVersion": "2026.09"
}
```
To turn on user-level access for your app, add `isUserLevel: true` to the `config` property in your app's top-level `app-hsmeta.json` [file](/docs/apps/developer-platform/build-apps/app-configuration#app-schema):
```json highlight={7} theme={null}
{
"uid": "your-app-uid",
"type": "app",
"config": {
"name": "Your App Name",
"distribution": "marketplace",
"isUserLevel": true,
"auth": {
"type": "oauth",
"redirectUrls": [
"http://localhost:4000/oauth2/hubspot-callback"
]
}
}
}
```
If `isUserLevel` is set to `false` or left unspecified, your app will use account-level access.
Once you finish updating your app's configuration and upload your project, any user who installs your app will have their actions annotated with `[User] via [app name]` in HubSpot's app audit logs.
**Please note:** existing apps using account-level access cannot currently be migrated to user-level access. You'll need to create a new app with user-level access to leverage this functionality.
## Supported platform features
The sections below outline the platform feature support for user-level access.
### Platform features
| Feature | Account-level | User-level |
| ----------------------------------------------------------------------------------------------------------- | ------------- | -------------------------------------------- |
| [APIs](/docs/api-reference/latest/overview) | Yes | Yes ([partial](#api-support)) |
| [MCP](/docs/apps/developer-platform/build-apps/integrate-with-the-remote-hubspot-mcp-server) | No | Yes |
| [App pages](/docs/apps/developer-platform/add-features/ui-extensions/extension-points/app-pages/overview) | Yes | Yes ([partial](#ui-extension-point-support)) |
| [App cards](/docs/apps/developer-platform/add-features/ui-extensions/extension-points/app-cards/overview) | Yes | No |
| [App settings](/docs/apps/developer-platform/add-features/ui-extensions/extension-points/create-a-settings-page) | Yes | Yes ([partial](#ui-extension-point-support)) |
| [`hubspot.fetch()`](/docs/apps/developer-platform/add-features/ui-extensions/fetching-data#hubspot-fetch) | Yes | Yes |
| [UIE hooks](/docs/apps/developer-platform/add-features/ui-extensions/ui-extensions-sdk/hooks) | Yes | Yes |
| [Serverless functions](/docs/apps/developer-platform/add-features/serverless-functions/overview) | Yes | No |
| [Webhooks](/docs/apps/developer-platform/add-features/configure-webhooks) (v3, v4) | Yes | No |
| [Custom workflow actions](/docs/apps/developer-platform/add-features/custom-workflow-actions) | Yes | No |
| [Agent tools](/docs/apps/developer-platform/add-features/agent-tools/overview) | Yes | No |
| [App events](/docs/apps/developer-platform/add-features/app-events/overview) | Yes | No |
| [App objects](/docs/apps/developer-platform/add-features/app-objects/overview) | Yes | No |
| [CMS](/docs/cms/start-building/introduction/overview) | Yes | No |
| [SCIM](/docs/apps/developer-platform/add-features/scim) | Yes | No |
* Both [app distribution options](/docs/apps/developer-platform/build-apps/app-configuration#distribution) are supported.
* Only [OAuth authentication](/docs/apps/developer-platform/build-apps/app-configuration#authentication#oauth) allows user-level access. Apps with [static auth](/docs/apps/developer-platform/build-apps/app-configuration#authentication#static-auth) do not support user-level access.
### UI extension point support
For [app pages](/docs/apps/developer-platform/add-features/ui-extensions/extension-points/app-pages/overview) and [app settings](/docs/apps/developer-platform/add-features/ui-extensions/extension-points/create-a-settings-page), you'll need to set up and manage a separate backend service yourself to provide user-specific functionality and ensure you're not sharing data between individual user installs.
### API support
The following REST APIs are currently supported with user-level apps, unless otherwise noted:
**[Sequences](/docs/api-reference/latest/automation/sequences/guide):**
* The following endpoints are supported: create enrollments and manage sequence definitions.
* The read, unenroll, and pause endpoints do not yet support user-level access.
* [Contacts](/docs/api-reference/latest/crm/objects/contacts/guide)
* [Companies](/docs/api-reference/latest/crm/objects/companies/guide)
* [Deals](/docs/api-reference/latest/crm/objects/deals/guide)
* [Tickets](/docs/api-reference/latest/crm/objects/tickets/guide)
* [Leads](/docs/api-reference/latest/crm/objects/leads/guide)
* [Tasks](/docs/api-reference/latest/crm/activities/tasks/guide)
* [Notes](/docs/api-reference/latest/crm/activities/notes/guide)
* [Calls](/docs/api-reference/latest/crm/activities/calls/guide)
* [Emails](/docs/api-reference/latest/crm/activities/emails/guide)
* [Meetings](/docs/api-reference/latest/crm/activities/meetings/guide)
* [Goal Targets](/docs/api-reference/latest/crm/objects/goals/guide)
* [Feedback Submissions](/docs/api-reference/latest/crm/objects/feedback-submissions/guide)
* [Services](/docs/api-reference/latest/crm/objects/services/guide)
* [Courses](/docs/api-reference/latest/crm/objects/courses/guide)
* [Listings](/docs/api-reference/latest/crm/objects/listings/guide)
* [Partner clients](/docs/api-reference/latest/crm/objects/partner-clients/get-partner-client)
* [Partner services](/docs/api-reference/latest/crm/objects/partner-services/get-partner-service)
* [Projects](/docs/api-reference/latest/crm/objects/projects/guide)
* [Contracts](/docs/api-reference/latest/crm/objects/contracts/guide)
* [Orders](/docs/api-reference/latest/crm/objects/orders/guide)
* [Carts](/docs/api-reference/latest/crm/objects/carts/guide)
* [Invoices](/docs/api-reference/latest/crm/objects/invoices/guide)
* [Quotes](/docs/api-reference/latest/crm/objects/quotes/guide)
* [Line items](/docs/api-reference/latest/crm/objects/line-items/guide)
* [Products](/docs/api-reference/latest/crm/objects/products/guide)
* [Discounts](/docs/api-reference/latest/crm/objects/discounts/guide)
* [Fees](/docs/api-reference/latest/crm/objects/fees/guide)
* [Taxes](/docs/api-reference/latest/crm/objects/taxes/guide)
* [Commerce payments](/docs/api-reference/latest/crm/objects/commerce-payments/guide)
* [Commerce subscriptions](/docs/api-reference/latest/crm/objects/commerce-subscriptions/guide)
* [Price Books](/docs/api-reference/2026-09-beta/revenue/price-books/guide):
* The following endpoints are supported: list, get, and batch read.
* The search and write endpoints do not yet support user-level access.
* [Price Book items](/docs/api-reference/2026-09-beta/revenue/price-books/guide):
* The following endpoints are supported: list, get, and batch read.
* The search and write endpoints do not yet support user-level access.
* [Forecasts](/docs/api-reference/2026-09-beta/crm/objects/forecasts/guide):
* The following endpoints are supported: list, get, and search
* The configuration and write endpoints aren't yet supported for user-level access.
* [Custom Objects](/docs/api-reference/latest/crm/objects/custom-objects/guide)
* [Associations](/docs/api-reference/latest/crm/associations/overview):
* The following endpoints are supported: create a single labeled or unlabeled association, read associations on a record.
* All bulk operations, label management, limits management, and usage reporting endpoints do not yet support user-level access.
* [Pipelines & pipeline stages](/docs/api-reference/latest/crm/pipelines/guide):
* Only read endpoints are currently supported.
* Create, replace, and delete endpoints aren't yet supported for user-level access.
* [Email templates](/docs/api-reference/latest/automation/email-templates/guide)
All scopes associated with the supported endpoints above are supported for user-level access, with the exception of the scopes listed below:
* `cpq.quote_templates.read`
* `cpq.quotes.read`
* `cpq.quotes.write`
* `marketing.lead_scoring.read`
* `marketing.lead_scoring.write`
* `crm.schemas.custom.write`