Skip to main content
Connector Profile Access is only available on certain plans. See plans and pricing.
When someone links an account, they only see the connector profiles they’re allowed to link through. Each profile is either Shared or Restricted: Project Admins can still view, edit and delete a restricted profile.

​
When to restrict a connector profile

Restrict a profile when its configuration is sensitive and only some people should connect through it. Each of them still links their own account.
A user can reach a provider by linking their own account through a connector profile, or by using an account someone else has already linked:
Example cases:
A sales team of account executives, with two sales managers who also fix records in bulk.
  1. Create two CRM connector profiles: one with admin scopes, and one with read-only scopes.
  2. Restrict the admin-scoped profile, and leave the read-only one Shared.
  3. Grant the sales managers Connector Profile Member on the admin-scoped profile.
  4. Each manager links their own CRM account through the admin-scoped profile.
  5. Everyone else links through the read-only profile.
An HR team that handles payroll.
  1. Restrict the HR connector profile that reaches payroll data.
  2. Grant the HR team’s group Connector Profile Member on it.
  3. Only the HR team can link accounts through it.

​
Access to a restricted connector profile

A grant gives a user or group one of two roles, Connector Profile Admin or Connector Profile Member. On a restricted connector profile:
Connector profile access shown for three users in Project 1. User A is a Project Admin, User B a Project Member granted Connector Profile Member on the restricted profile, and User C a Project Member with no grant. On the shared profile, User A manages it and Users B and C can link accounts through it. On the restricted profile, User A can edit it but not link accounts through it, User B can link accounts through it, and User C has no access.

​
Restrict a connector profile

Restricting a shared profile needs Project Admin or Organization Admin. Once it’s restricted, only a Connector Profile Admin can change its access.
1

Open the profile's Access tab

  1. In Connectors, open the connector and select the profile’s card.
  2. Select its Access tab.
2

Switch it to Restricted

Under Who can use this profile, change the selector from Shared to Restricted. You become its Connector Profile Admin when you save, so you can’t lock yourself out.
Accounts already linked through the profile stay linked, and can still be re-authenticated through it without a grant.
3

Grant users and groups

  1. On the Users view, use Add users to pick each person.
  2. On the Groups view, use Add groups to pick each group.
  3. Set each row’s role to Admin (Connector Profile Admin) or Member (Connector Profile Member). Revoke removes a row.
4

Save

Click Save Access in the bar at the bottom of the page. Cancel discards the changes.
A connector profile's Access tab set to Restricted, explaining that only the listed users and groups can link new accounts while already-linked accounts stay connected, above a user roster with Member and Admin roles and Revoke buttons

A restricted profile with two granted users

A group’s grant covers everyone in it, and follows the group as people join or leave. See Groups. To change access later, a Connector Profile Admin edits the same Access tab and saves. A restricted profile must keep at least one Connector Profile Admin, so hand the role to someone else in the same save, or switch the profile back to Shared.

​
The default for new connector profiles

Each project has a Default Access setting that decides whether connector profiles created from then on start Shared or Restricted. Only an Organization Admin can change the default:
  1. Go to Project Settings > Connector Profiles.
  2. Under Default Access, choose Shared or Restricted.
  3. Click Save.

Scoping Connectors

Choose which of a profile’s actions and events are exposed.

Groups

Grant many users the same access at once with reusable groups.

Linking Accounts

Connect the provider accounts your agents act on.

Manage Team

Add people to the organization, and remove their access when they leave.