Skip to main content

Enable Zoho CRM API Access for User Profiles

Enabling Zoho CRM API access at the profile level is a critical step for integrations and automation. By following this guide, administrators can safely grant API permissions while maintaining control over system security.

Updated this week

Who Should Use This Guide

  • Zoho CRM Administrators

  • IT or Integration Teams

  • Developers setting up API-based integrations

⚠️ Note: Only users with administrative privileges can modify profile-level security settings.

Prerequisites

Before proceeding, ensure that:

  • You have Admin access to Zoho CRM

  • You know which Profile is assigned to the user making the API call (e.g., Standard, Sales, or a custom profile)

Step-by-Step Guide: Enable Zoho CRM API Access

Step 1: Log in to Zoho CRM

  • Sign in to your Zoho CRM account using an administrator account.

Step 2: Open Setup

  • Click the Setup icon (⚙️ gear icon) located in the top-right corner of the screen.

Step 3: Go to Security Control

  • In the Setup menu, navigate to Security Control.

  • Select Profiles from the available options.

Step 4: Select the User Profile

  • In the Profiles tab, locate the profile assigned to the user who will make API calls.

    • Examples:

      • Standard Profile

      • Sales Profile

      • Any custom-created profile

  • Click on the Profile name to open its settings.

Step 5: Locate Developer Permissions

  • Scroll down to the bottom of the profile settings page.

  • Find the section labelled Developer Permissions.

Step 6: Enable Zoho CRM API Access

  • Locate the Zoho CRM API Access toggle.

  • Turn the toggle ON.

    • When enabled, the toggle will turn green.

Step 7: Save the Changes

  • Click Save to apply the updated permissions.

Verification Checklist

After enabling API access, verify the following:

  • ✅ The profile shows Zoho CRM API Access: ON

  • ✅ The user can successfully authenticate using API credentials or OAuth tokens

  • ✅ API calls no longer return permission-related errors

Common Issues & Troubleshooting

API Access Still Not Working?

  • Ensure the correct profile was updated

  • Confirm the user has logged out and logged back in

  • Check if IP restrictions or role-based limitations are applied

  • Verify OAuth scopes if using OAuth-based authentication

Security Best Practices

  • Enable API access only for required profiles

  • Avoid granting API access to all users unnecessarily

  • Regularly review profile permissions

  • Revoke access when integrations are no longer in use

Summary

Enabling Zoho CRM API access at the profile level is a critical step for integrations and automation. By following this guide, administrators can safely grant API permissions while maintaining control over system security.

If you continue to face issues, review Zoho CRM logs or contact Zoho Support for further assistance.

Did this answer your question?