# Google social login contacts permissions

**URL:** <https://community.auth0.com/t/google-social-login-contacts-permissions/8831>\
**Category:** Get Help\
**Tags:** google, permissions, google-endpoints\
**Created:** [November 27, 2017, 12:37am UTC](https://community.auth0.com/t/google-social-login-contacts-permissions/8831 "2017-11-27T00:37:43Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![animalbrain](https://upload.wikimedia.org/wikipedia/commons/thumb/7/7c/User_font_awesome.svg/768px-User_font_awesome.svg.png) [@animalbrain](https://community.auth0.com/u/animalbrain)\
**Post date:** [November 27, 2017, 12:37am UTC](https://community.auth0.com/t/google-social-login-contacts-permissions/8831/1 "2017-11-27T00:37:43Z")

</div>

In the social connections \> Google \> permissions setup in auth0, there is an option to request permissions to a user’s google contacts. That permission setting seems to resolve to the google scope [https://www.googleapis.com/auth/contacts](https://www.googleapis.com/auth/contacts).

That scope requests full contact management permission. In reviewing my permission requests, Google has suggested I use the READ-ONLY contacts scope:  
[https://www.googleapis.com/auth/contacts.readonly](https://www.googleapis.com/auth/contacts.readonly)

I agree, and only want to request read-only contacts permissions of my users, but I don’t see a way to do that in auth0.

Is there any way to request read-only contact permissions instead of full management permissions?

---

<div class="post-metadata">

**Author:** ![jmangelo](https://sea1.discourse-cdn.com/auth0/user_avatar/community.auth0.com/jmangelo/32/7923_2.png) [@jmangelo](https://community.auth0.com/u/jmangelo)\
**Post date:** [November 27, 2017, 7:58pm UTC](https://community.auth0.com/t/google-social-login-contacts-permissions/8831/2 "2017-11-27T19:58:38Z")

</div>

You should be able to accomplish that by not selecting the scope in question through the dashboard and then request the scope you actually need through a parameter. In particular, according to [this documentation](https://auth0.com/docs/connections/adding-scopes-for-an-external-idp#2-pass-scopes-to-authorize-endpoint) you can use the `connection_scope` parameter to include the read-only scope that you want to be requested from Google.

---

<div class="post-metadata">

**Author:** ![system](https://global.discourse-cdn.com/auth0/original/3X/b/5/b560f266932fcce5d57f09a6595bd50518cae3f3.jpeg) [@system](https://community.auth0.com/u/system)\
**Post date:** [March 2, 2018, 5:57am UTC](https://community.auth0.com/t/google-social-login-contacts-permissions/8831/3 "2018-03-02T05:57:33Z")

</div>