When authorizing the Hubbl Diagnostics connected app during the org scanning process, you'll be prompted to grant four specific permissions:
- Access the identity URL service: Hubbl retrieves a limited set of user information for troubleshooting and the confirmation page scan flow.
- Manage user data via Web browsers: This permission allows Hubbl to capture certain org information not accessible through APIs but visible in Setup pages.
- Manage user data via APIs: Hubbl requires this permission to collect metadata, configuration details, usage limits, and aggregate record and field count information.
- Perform requests at any time: This permission enables Hubbl to support scheduled and repeating scans. For one-time scans, access tokens are automatically deleted upon scan completion, ensuring that Hubbl cannot reconnect post-scan regardless of this permission.
