Read access
View CalendarsView Calendar Events
View CampaignsView Conversations
View Conversation MessagesView Conversation Reports
View ContactsView Locations
View OpportunitiesView Workflows
View TagsView Custom Values
View Social Media Posting
Write access (clients can act)
Edit ContactsEdit Conversations
Edit Conversation MessagesEdit Opportunities
Edit TagsEdit Custom Values
Edit CalendarsEdit Calendar Events
Tags + Custom Values write access is required for Nova β without it, her post-call tagging and booking-link handoff to GHL will fail with a 401.
Confirmed 2026-09-01: without Edit Calendar Events (or the equivalent calendar-write scope), Aria's live booking gets all the way through check_availability fine β that only needs read access β then fails at the actual booking step with "The token is not authorized for this scope." Easy to miss since the read-side of the same feature works perfectly, making it look like a code bug rather than a missing write scope.
Confirmed 2026-08-29: without View Social Media Posting, GHL doesn't error β it silently returns nothing, so Sage's dashboard card just shows 0 connected accounts even when the client genuinely has GBP/Facebook/LinkedIn connected in GHL. The exact label may read slightly differently in GHL's own scope picker β look for anything mentioning "Social" if this one isn't an exact match.