We built an internal OAuth integration in Admin center > API using Personal access and read-only scopes (calls, transcripts, users, stats, mcp:read). The goal is for every Gong user at our company to connect their own account through our internal AI assistant.
Today, any user who isn't a Technical Administrator gets blocked at the consent screen with: "Insufficient permissions - You need to be Technical Administrator to authorize [integration] access to your account."
Why this should be allowed: Personal access already limits data to what the authorizing user can see in Gong. A user approving read-only access to their own data shouldn't need org-wide admin rights.
The current workarounds aren't great:
- Making users Tech Admins over-grants privileges.
- A Shared access integration authorized once by an admin gives every user of the tool access to all company calls, which breaks least privilege.
Request: Let regular users authorize Personal access integrations that a Tech Admin has already created and approved, e.g. via a permission profile toggle or a per-integration "allow all users to connect" setting.