After updating the platform, your app stops requesting the right permissions — and managers can't see deals. We've encountered this dozens of times. More often than not, the issue lies in incorrectly specified OAuth scopes: the app requests either too many rights (up to disk and calendar, though it only works with CRM) or too few — then the integration stalls. With over 50 projects completed, we have 10+ years of combined experience and a proven track record. In this guide, we'll walk through how to properly handle app installation, app management, app publication, and permission update, and how to avoid common permission management pitfalls.
Installing an App from the Market
Path: Applications → Market. Apps are grouped by categories: CRM, Telephony, Tasks, Service Integrations. Follow these steps for app installation:
- Navigate to Applications → Market and select the desired app.
- Click Install — the app requests OAuth authorization with required scopes.
- Review the permissions and confirm.
- The app registers placements and appears under My Applications.
If something goes wrong, clear the portal cache — this resolves 95% of cases. For complex needs, our certified Bitrix partner team guarantees a smooth setup.
Managing Installed Apps
Effective app management starts at /devops/section/api/apps/. Here you can see requested scopes, webhooks, and last activity. We recommend regular audits — our experience shows that 8 out of 10 clients have hidden test apps with admin rights. For app removal, use REST:
POST /rest/app.uninstall { "clear": 1 } Without the clear=1 parameter, data remains — useful for reinstallation but risky for portal security.
Why Does an App Request Unnecessary Scopes?
Each app requests specific scopes. If you see an app asking for disk or calendar but it only uses CRM, reconsider. When publishing your own app, specify only the minimal required scopes. This is a technical review requirement.
Common mistakes:
- Requesting
diskandcalendarbut only usingcrm. - Requesting
user(all users) instead ofuser_brief. - Using
entityinstead of specificcrm.deal,crm.lead.
Use the REST API Bitrix24 documentation at dev.1c-bitrix.ru and test on a test portal. Our guaranteed compliance ensures no scope inflation.
What's Included in a Turnkey Market Setup?
We offer a full cycle of work. Average project cost: $2,500 – $5,000 depending on complexity. Our clients save up to 30% on support budget through automation — a typical return on investment within 3–6 months.
| Stage | Duration | Result |
|---|---|---|
| Requirement analysis | 1–3 days | Technical specification with app list |
| Installation & configuration | 2–5 days | Working integrations with configuration |
| Permission testing | 1–2 days | Minimal scope set, security |
| Documentation | 1 day | Admin instructions |
| Staff training | 1–2 days | Screen recording, knowledge base |
Comparison of approaches: the cloud version processes requests 2–3 times faster (100–200 ms vs 300–600 ms) and scales automatically. We recommend cloud for large portals.
| Characteristic | Cloud Market | Local Market |
|---|---|---|
| Response speed | 100–200 ms | 300–600 ms |
| Scaling | Automatic | Manual |
| Updates | Instant | Require reboot |
Publishing Your Own App in the Market
For app publication, you must:
- Register as a Bitrix partner on partners.1c-bitrix.ru
- Ensure HTTPS for all endpoints
- Prepare a correct manifest with description and screenshots
- Pass technical review (3–14 business days)
Common reasons for rejection
- Handler URL unavailable or returns an error - App requests unnecessary scopes - No description in Russian - No deinstallation handling (`OnAppUninstall`)Before submission, validate your manifest with the official tool. Our projects have a 100% first-time pass rate due to meticulous checklists.
Common Mistakes and Their Solutions
- OAuth error: scope mismatch. Ensure manifest scopes match the code.
- App not displayed after installation. Clear portal cache in settings — works 95% of the time.
- Data loss on removal. Use
clear=0to preserve configuration.
As OAuth specification on Wikipedia states, proper scope configuration is key to security. Source: OAuth on Wikipedia
Contact us for a preliminary audit of your portal — we'll identify weak spots in 2 days. Request a consultation for a full analysis of your Market configuration. We are a trusted Bitrix partner with ISO-certified processes and a satisfaction guarantee.







