HubSpot offers two ways for external apps to read your data: a Private App (a token you mint manually in HubSpot’s Integration settings) and an OAuth app (a third-party app you install from the Marketplace, which then requests OAuth scopes).
Power BI Connector for HubSpot is an OAuth app. When your HubSpot Super Admin installs it from the Marketplace, HubSpot walks them through approving the OAuth scopes the connector needs. There is no Private App token to manage on your side — the OAuth grant covers the connector’s read access to HubSpot data.
What about the access tokens I create in the connector? #
The access tokens you mint in the connector’s Access Tokens page are not HubSpot tokens. They’re connector-side bearer tokens used by Power BI to authenticate against the connector’s OData URL. Power BI sends the connector token; the connector then uses its own OAuth grant to read HubSpot.
Two layers of credentials:
- OAuth grant — HubSpot Marketplace install. One per portal. Managed by the HubSpot Super Admin.
- Connector access token — minted per user in the connector. Used by Power BI Desktop and Power BI service. Multiple per user are OK.
If you uninstall the connector from HubSpot, the OAuth grant is revoked — every connector access token stops working immediately, even though the tokens themselves are still listed in the connector. Re-installing the connector restores the OAuth grant but does not revive old tokens; mint new ones.
