HubSpot user permissions guide

HubSpot users with Add & edit users permissions can customize permissions for new and existing users in their HubSpot account. If the user is customizing permissions for a user with a paid seat, they must also have Modify billing permissions.

You can also limit edit access to properties and assign content access for specific users. Learn how to access the Users & Teams settings to update user permissions.

CRM

On the CRM tab, set permissions for CRM objects and tools.

To manage user permissions for your conversations inbox, review the documentation on how to create a conversations inbox.

Object Access

Customize which objects or activities the user can view, edit, or delete. Depending on the object, you can select from the following permissions:

• View: click the dropdown menu to control the set of contacts, companies, deals, tickets, tasks, notes, invoices, and individual custom objects the user can view. Users with View: Owned only permissions will only see their assigned records on index pages, in the lists tool, and in reports.
  • The options are Everything, Team only, and Owned only.
  • When selecting Team only or Owned only, select the Unassigned checkbox to allow the user to view unassigned records or activities. 

Please note: to view attachments in records created by other users, a user's Notes permission must be set to Everything. If you selected the Unassigned checkbox for the Notes permission, this allows you to see unassigned notes created via integrations. Notes can't be unassigned in HubSpot since they only have creators, not owners. 

• Edit: click the dropdown menu to control the set of contacts, companies, deals, tickets, tasks, invoices, and individual custom objects the user can edit, merge, and import.
  • The options are Everything, Team only, Owned only, and None.
  • When selecting Team only or Owned only, select the Unassigned checkbox to allow the user to edit unassigned records or activities.

• Delete: click the dropdown menu to control the set of contacts, companies, deals, tickets, and individual custom objects the user can delete.
  • The options are Everything, Team only, Owned only, and None.
  • When selecting Team only or Owned only, select the Unassigned checkbox to allow the user to delete unassigned records or activities.

CRM Tools

Customize access to bulk actions, property settings, and the workflows tool.

• Workflows: select the checkboxes to let the user Delete, Edit, or View access to the workflows tool. To give a user Delete access, they must be given Edit access.
• Communicate: click the dropdown menu to control the contacts, companies, deals, tickets, tasks, and individual custom objects a user can add an email, call, or meeting to, as well as associate these activities with other records.
  
  • The options are Everything, Team only, Owned only, and None.
  • When selecting Team only or Owned only, select the Unassigned checkbox to allow the user to communicate with unassigned contacts and companies.
  • This only applies to CRM emails, not marketing emails. Learn more about setting permissions for marketing emails. 

• Bulk delete: toggle the Bulk delete switch on to let the user bulk delete contacts, companies, deals, tickets, and tasks. This would allow the user to delete contacts from within a list or dashboard, for example. Users without this permission can still delete contacts, company, deals, tickets, and tasks from individual records if they have the Edit permission for Contacts Access.
• Import: toggle the Import switch on to let the user import contacts, companies, and deals into your HubSpot account.
• Export: toggle the Export switch on to let the user export contacts, companies, deals, and reporting data from your HubSpot account.
• Edit property settings: toggle the Edit property settings switch on to let the user create and edit properties, edit record sidebars and board cards, edit deal pipelines and stages, and access the lead scoring tool.
• Customize middle column layout: toggle the Customize middle column layout switch on to let the user update the content and appearance of the record middle column.
• Chatflows: toggle the Chatflows switch on to let the user create, edit, and publish chatflows in your HubSpot account.
• Custom views (Professional and Enterprise only): toggle the Custom views switch on to let users create, edit, and delete custom views in the inbox. 

Marketing

On the Marketing tab, set permissions for marketing publishing tools. View permissions allow a user to view assets. Edit permissions allow a user to edit assets. Publish permissions allow a user to publish changes to assets.

• Forms: toggle the Forms switch on to let the user access the forms tool. 

Please note: to create and connect a support form to a channel, a user needs Account Access permission. To edit a form's follow-up email a user needs Marketing Email Publish permission.

• Lists: select the checkboxes to give the user access to the lists tool.
  • Edit: the user can create and edit lists. To add records to a static list, a user also needs Edit access for contacts and companies.
  • View: the user can access the lists tool to view lists, but cannot create or edit them.
• Files: toggle the Files switch on to let the user add, edit, and delete files from within HubSpot.
  • In HubSpot’s free tools, this permission allows the user to upload files such as attachments on records.
  • For Starter, Professional, and Enterprise accounts, this lets users take action on files within the file manager. Users without this permission can still view files in the file manager.

• Marketing Access: toggle the Marketing Access switch on to let the user access marketing tools, such as the email tool or opting contacts out of marketing emails. This also lets the user access Website activity on contact records. With the switch on, you can turn on more specific marketing tool permissions.

Marketing tools

• Ads: select the checkboxes to give the user Publish or View access to the ads tool.
• Campaigns: select the checkboxes to give the user Edit or View access to the campaigns tool.
• Email: select the checkboxes to give the user View, Edit, or Publish access to the email tool.
  • A user must have at least View access to unbounce a contact.
  • A user must have at least View access and Website settings permission to configure email footer and styling settings.
  • Users with Edit access can create emails, delete emails, edit the default values for email personalization, and send test emails, but cannot send marketing emails to contacts or save emails for automation to use in workflows.
  • A user must have Publish access to publish and send marketing emails.

• CTA: select the checkboxes to give the user View, Edit, or Publish access to the CTA tool.
• Social publishing: click the dropdown menu to control the social accounts the user can publish to. Users with All accounts, Their accounts only, or Draft only social permissions can see all shared social accounts in social monitoring, publishing, and reports, as well as any social accounts they connected.

  • All accounts: the user can publish to social accounts they connected, or to any shared social accounts. The user can also configure social settings.

  • Their accounts only: the user can only publish to social accounts they connected.

  • Draft only (Marketing Hub Enterprise only): the user cannot publish to any social accounts, but can create draft social posts in social accounts they connected or any shared social accounts.

  • None: the user has no access to the social tool, which will not appear in the navigation menu when they are logged in.

• Content staging: toggle the Content staging switch on to let the user access the content staging tool.

Website tools

• Blog: select the checkboxes to give the user Publish, Edit, or View access to the blog tool. Users with Edit access can create content in the blog tool, but cannot publish new posts or update live posts.
• Landing pages: select the checkboxes to give the user Publish, Edit, or View access to the landing pages tool. Users with Edit access can create landing pages but cannot publish new pages or update live pages.
• Website pages: select the checkboxes to give the user Publish, Edit, or View access to the website pages tool. Users with Edit access can create website pages but cannot publish new pages or update live pages.

• HubDB (CMS Hub only): select the checkboxes to give the user Publish, Edit, or View access to HubDB.

• • Publish: the user can add new rows, edit existing rows, and delete rows from a table.
  • Edit: the user can add rows to a table, clone locked rows, import data, and export data.

• • View: the user can see data within the table rows and export data, but cannot add additional data.

Please note: users must have HubDB table settings enabled in Account access to update table settings and create, clone, unpublish, or delete HubDB tables.

• URL redirects: select the checkbox to give the user View or Edit permissions in the URL redirects tool. Users with Edit access can create and update URL redirects.
• Design tools: toggle the Design tools switch on to let the user edit templates and modules. Users with this permission can also access the template marketplace and save marketing emails as templates.

Please note: it's recommended to also give a user Global content settings and Website settings permissions if they'll need to edit global web assets and blog/website settings.

Sales

On the Sales tab, set more granular permissions and restrictions for sales tools such as products and templates, as well as assign paid Sales Hub seats.

• Manage product library: click to toggle the Manage product library switch on to let the user create and edit products in the product library.
• Create custom line items: this is turned on by default and lets the user create line items from a deal record or quote. To remove access for a user, click to toggle the Create custom line items switch off.
• Sales Access: click to toggle the Sales Access switch on to let the user access sales templates, snippets, documents, calling, and the meetings tool, as well as the option to connect their personal email. With the switch on, more granular permissions will appear for HubSpot's sales tools.
• Templates: click to toggle Templates switch on to let the user create, edit, and delete templates. Users with assigned Sales Hub and Service Hub paid seats that do not have permission to create and edit templates will still be able to view and send templates.
• Create scheduling pages for others: click to toggle the Create scheduling pages for others switch on to let the user create, edit, and delete scheduling pages for other users.
• Sales Starter/Professional/Enterprise: click to toggle the Sales Starter/Professional/Enterprise switch on to let the user access sales tools available for the seat. By default, this includes playbooks, call transcription, and quote-based workflows.

Please note: If you've assigned all of your paid seats, you can click Purchase another User to upgrade a user. Learn more about managing paid Sales Hub users.

• • Forecast: customize Edit and View access to the sales forecast tool and revenue goals.
    • All users can create a goal.
    • Users with Sales Hub Professional or Enterprise or Service Hub Professional or Enterprise paid seats can be assigned a goal.
    • Users with Owned only view permissions can only view their own goals and forecasts.
    • Users with Team only view permissions can see their own goals and forecasts as well as their teammates within that team.
  • Playbooks: select the checkboxes to give the user Publish or Edit access to playbooks. Only Sales Hub Professional and Enterprise users with Account Access permissions can edit a user's Publish and Edit permissions for playbooks.
  • Sequences: click to toggle the Sequences switch on to let the user create and edit sequences. Users with assigned Sales Hub Professional or Enterprise or Service Hub Professional or Enterprise paid seats that do not have permission to create and edit sequences will still be able to view and send sequences.
  • Bulk enroll sequences: this is turned on by default for Sales Hub Professional and Enterprise users. Click to toggle the Bulk enroll sequences switch off to remove a user's access to bulk enroll contacts in a sequence. When this is turned off, users can only enroll one contact at a time.
  • View Prospecting as another user: click to toggle the View Prospecting as another user switch on to let the user view other users' prospecting workspaces.

  If you're a US-based company using the payments tool, you can customize which users can create payment links or manage your account's transaction history. Use these permissions options to manage access for both your front and back-office teams:

  • Manage payment links: click to toggle the Manage payment links switch on to let the user create, edit, and delete payment links.
  • Manage payments and subscriptions: click to toggle the Manage payments and subscriptions switch on to let the user view transaction and payout history, download payment and payout reports, resend receipts, cancel subscriptions, and issue refunds.

  Service

  On the Services tab, you can set more granular permissions for HubSpot's service tools.

  • Service Access: toggle the Service Access switch on to let the user access the service tools. With the switch on, more granular permissions will appear for HubSpot's service tools. 
  • Customer feedback surveys: the Edit checkbox lets the user create surveys in the feedback tool.
  • Knowledge base articles: select the checkboxes to give the user Publish or Edit access to the knowledge base tool. Users with the Edit access can create knowledge base articles, but cannot publish or update them.
  • Templates: click to toggle the Templates switch on to let the user create, edit, and delete templates. Users with assigned Sales Hub and Service Hub paid seats that do not have permission to create and edit templates will still be able to view and send templates.
  • Create scheduling pages for others: click to toggle the Create scheduling pages for others switch on to let the user create, edit, and delete scheduling pages for other users.
  • Service Starter/Professional/Enterprise: toggle the Service Starter/Professional/Enterprise switch on to assign the user a Service Hub Starter, Professional, or Enterprise seats, if they are available. Learn more about managing paid Service Hub users.
    • Playbooks: select the checkboxes to give the user Publish or Edit access to the playbooks tool. Only Service Hub Professional and Enterprise users with Account Access permissions can edit a user's Publish and Edit permissions for playbooks.
    • Sequences: click to toggle the Sequences switch on to give the user access to create and edit sequences. Users with assigned Sales Hub Professional or Enterprise or Service Hub Professional or Enterprise paid seats that do not have permission to create and edit sequences will still be able to view and send sequences.
    • Bulk enroll sequences: this is enabled by default for Sales Hub Professional and Enterprise users. Click to toggle the Bulk enroll sequences switch off to remove a user's access to bulk enroll contacts in a sequence. When this is turned off, users can only enroll one contact at a time.

• Reports

  On the Reports tab, you can give the user the permissions to create, edit, and/or view dashboards, reports, and analytics tools.

  • Data quality tools access: toggle the Data quality tools access switch on to let non-super admin users access the data quality command center to monitor and clean data quality issues.
  • Reports access: toggle the Reports access switch on to let the user access reporting tools, including dashboards, reports, and analytics tools. With the switch on, more granular permissions will appear for HubSpot's reporting tools.
  • Dashboard, reports, & analytics: select the checkboxes to give the user Create/own, Edit, or Edit access to reporting tools.
    • Create/own: lets the user create and own dashboards and reports.
    • Edit: lets the user edit dashboards, reports, and analytics tools that they have access to. This will be selected if you grant permission to the user to create and own.
    • View: lets the user view dashboards, reports, and analytics tools. This is selected by default when the Reports access switch is toggled on.

• • Goals: click the View and Edit dropdown menus to control the level of access users have to view, create, and edit goals.
  • Datasets: select the checkboxes to give the user View and Edit access to datasets.
    
    • View: lets users view existing pre-built datasets to build reports using the custom report builder. This allows users to utilize pre-determined calculated fields, and filter criteria and properties to build a report.
    • Edit: lets users create new datasets that can be used to create custom reports.

• • Marketing reports: toggle the Marketing reports switch on to let users access marketing reports in HubSpot's analytics tools. This includes traffic analytics, page performance, competitors, tracking URL builder, events (Marketing Hub Enterprise only), and reports settings.

  Account

  On the Account tab, you can set more granular permissions for account administration.

  Settings

  • Marketing contacts access: toggle the Marketing contacts access switch on to let the user set contacts as marketing contacts or non-marketing contacts.
  • Personal email access: toggle the Personal email access switch on to send and track 1:1 emails from the CRM. Users will also be able to use the HubSpot Sales extension. 
  • App Marketplace Access: toggle the App Marketplace Access switch on to let the user install apps from the HubSpot Marketplace and third-party websites. 
  • Asset Marketplace Access: toggle the Asset Marketplace Access switch on to let the user install modules and templates from the HubSpot Marketplace.
  • Permanent delete contacts: toggle the Permanent delete contacts switch on to let the user permanently delete contact records. To delete contacts, the user will also need the contact delete permission on the CRM tab.
  • SMS setup: toggle the SMS setup switch on to let the user apply for and register your business for SMS messaging and generate an SMS number.
  • Approve content: toggle the Approve content switch on to let the user approve content for marketing emails. 
  • HubDB table settings: toggle the HubDB table settings switch on to let the user configure table settings and create, clone, unpublish, or delete HubDB tables.
  • Global content settings: toggle the Global content settings switch on to let the user edit global content and themes for website content.
  • Website settings: toggle the Website settings switch on to let the user edit website settings. This will also give the user the ability to update the SEO tool and manage the email account settings.
  • Knowledge base settings: toggle the Knowledge base settings switch on to let the user edit the knowledge base settings. This permission will also give the user Publish access to the knowledge base tool by default.
  • Customer Portal settings: toggle the Customer Portal settings switch on to let the user edit the customer portal settings. This permission will also give the user Publish access to the customer portal tool by default.

• • Reports & dashboards: toggle the Reports & dashboards switch on to let the user create any report or dashboard. This permission also gives access to all analytics tools and will override any settings in the Reports permission tab.
  • Domain settings: toggle the Domain settings switch on to let the user connect and edit domains.
  • User table settings: toggle the User table settings switch on to let the user view the user table in their HubSpot account settings. 

  Please note: if the User table settings switch is off, users will still be able to view lists of users elsewhere in their HubSpot account (e.g., when reassigning a contact to another owner).

  • Even without this permissions, users will be able to view lists of users in their portal elsewhere in their HubSpot account.
  • Availability Management: toggle the Availability Management switch on to let the user edit team members' availability in the conversations inbox. 

  Account Access

  The Account Access permission gives the user account admin access.

  

  By default, the following access is given with the permission enabled, and they can be disabled by toggling the switches off.

  • Add and edit users: toggle the Add and edit users switch on to let the user add or edit other users. A user with Account Access permissions can only give permissions to another user that they themselves have. If a user with Account Access permissions doesn't have Sales access, they cannot assign Sales access to another user. This also applies to permission sets; users can only assign permission sets that they share permissions with. Only a super admin can create and edit permission sets.
  • Add and edit teams: toggle the Add and edit teams switch on to let the user organize other users into specific teams.
  • Limit access by teams (Enterprise only): toggle the Limit access by teams switch on to let the user limit access of HubSpot assets to specific users and teams. 

• • Edit account defaults: toggle the Edit account defaults switch on to let the user set your account's name, language, time zone, currency and default date and number format. Users with this permission can set up and edit privacy policy alerts and create brand kits.

Super admin

Super admin permissions give access to all the account tools and settings detailed in this article, except for paid Sales Hub or Service Hub features, which require a paid seat. Super admins can also access the account’s API key and create and manage scheduling pages for the other users in the account. Super admin permission sets are not modifiable.

Only a super admin can set another user as a super admin. To make a user a super admin, click the Actions dropdown menu and select Make super admin.

If a super admin is required to complete a task or process, it’s recommended to have an existing super admin complete the task instead of updating an individual user's permissions.

Partner admin

• 	Super admin	Partner admin	Available features
  Elevated account access	Yes	Yes	Edit access for all CRM objects, products hubs, and applications. Targeted admin permissions needed for HubSpot Solutions Partners to serve customers.
  Full admin privileges	Yes	No	Ability to add and remove other super admins Management of account billing and financial transactions
  Paid Sales or Service Hub features	No	Yes	Partner admins do not need be assigned a paid Sales or Service Hub seat to use the features.
  Multi-account management features	No	Yes

In addition, Partner admins do not have access to the following features:

• User provisioning through SCIM through Okta
• Authorization for apps that can create, update, or delete users.
• Migration to other data centres.

Partner account

On the Partner tab, you can give a user access to partner tools in your HubSpot account and designate them as a Partner employee in client portals. By default, all new users in a partner account will not be given access to partner tools until Partner tools access is toggled on.

• Partner tools access: toggle the Partner tools access switch on to give the user access to partner tools.
  • Partner dashboard: select the checkboxes to give the user Edit or View access to the partner dashboard.
  • Solutions directory: select the Edit checkbox to give the user Edit access to the directory.
  • Partner Employee management: select the checkbox to give the user View or Edit access to the list of partner employees for a client. 
• Partner employee: toggle the Partner employee switch on in a HubSpot Partner account to mark a user as a Partner employee when they are added as a user in a client's HubSpot account.