We are able to edit user account info such as first name and last name, but why do admins not have access to update the email address associated with a user account? Is there any plan to add this functionality?
This is a big pain point for us as a larger company whose employees may change names over time. When an employee changes their name, they often get an updated email address (ex: johndoe@company.com to johnsmith@company.com or elizabethb@company.com to lizb@company.com). Since we use SSO, we have to go through a whole work-around process to exempt this user from SSO temporarily and walk the user through making the change themselves (if they remember their password). This should be part of user management as the admin would be aware of incoming changes and could update the user account’s email address at the same time as all other updates are done across the company.
To make this less of a security risk (e.g. disgruntled admin messes everyone’s account up on the day they quit), have email address changes go through two steps.
I second this! A member of my team just got married and has a new email address, and I don’t want to lose all of her data and metrics from the past year. I would really like to be able to update this for her, as many people on my team even struggle with technical basics.
This is an absolute necessity. As an enterprise customer, with users only permitted to access via SSO, it is madness that the business cannot control the email details. I am currently having to manually support multiple individuals in changing their email addresses following a domain change for part of our population. In doing so I am forced to break our security policy for HubSpot and permit password logins temporarily - SSO no longer works, as emails have changed.
Yes! We have SSO enabled, but not SCIM. I’m told there’s a bulk tool to edit email addresses, but I have to blow away the whole SSO config for the org to use it. I just need to update their email address to match our IdP… I know the user can edit their own email address, why can’t the super admin?
Amazed this isn’t possible. Take a look at Salesforce and just add an extra field for the federationID and a userID instead of just the one field for all these things.
We really need this. It is so difficult to update users email addresses with the current process. It’s almost impossible to walk users through the process especially if they are not located on site where I can see their screen.
Yeeessss please. Everyone already said why but seriously. Why would I need the person who’s email needs changed (for some reason) be involved in said change?
this is greatly needed! I love the idea of treating it like the 2FA removal, making is so that rouge SAs can’t just mess things up 