Is it possible for users who are not a super admin to set permission sets for other users?
We’ve created multiple permission sets to help organise the different user types within the account, due to the transactional nature of roles. We have a role which has a fairly high level of access, certainly compared to the others, however users within this can’t change the permission sets for lower access users.
Is the only way to do this to make them a super admin? Feels really insecure to be giving users super admin access in order for them to do this, but I’m scratching my head with this one and support haven’t provided much insight.
Hi @JamesDuffell,
Super Admins and users with Add and edit users permissions in your HubSpot account can change a user’s permissions.
(For this to work, the permission set cannot contain any permission that the assigning user is missing.)
Best regards!
Hi @karstenkoehler thank you for your response, I’d read that somewhere else and can confirm it’s set up like that but still no luck :S
Will do some more digging
@JamesDuffell just a single permission toggle would be enough for this not to work. For example, if the assigning user does not have “Import” permissions but the permission set includes “Import”, then the assignment won’t work. (This is what I think is going on.)
If you’re convinced you have everything set up correctly, I’d recommend contact HubSpot support so that they can check whether this is a bug.
@karstenkoehler HubSpot support keep coming back with conflicting answers as to who can / can’t edit permissions, the latest linked me to this knowledge base article where it looks like it’s one for admins 
seems a little bit daft to me
@JamesDuffell “admin” is not a clearly defined term in the HubSpot ecosystem, only “super admin” is.
“Admins with permissions to add or edit users can only assign permission sets that they themselves have permissions for.”
This reads to me exactly like what I shared before: https://community.hubspot.com/t5/Account-Settings/Apply-user-permission-sets-to-users/m-p/945407/highlight/true#M32376
If this was changed, then HubSpot support should have the documentation changed. If the documentation is correct, then it’s not behaving as expected. I would be persistent on this one, if I were you.
If needed, you can always escalate this through your customer success manager.
@karstenkoehler I’m in complete agreement, I’ve ended up with 2 support tickets on this, one saying it can’t be done, and one believing that there is indeed an issue. I’ll keep this thread updated as it maybe useful to others who encounter the same issue.
Hi @JamesDuffell did you get any further with this? Having similar issues! Last thing we want to do is assign all of IT Super Admin permission but having no luck. Made a permission set that can do everything and they still can’t assign permission sets (interestingly there is one permissions set they can assign which has minimum functionality). Spoke with support and they also weren’t sure the cause and have taken offline.
I’m afraid it isn’t possible, I’ve had so many support chats about this I can’t locate the exact messaging.
Essentially, the user will have to be a super admin, due to permission sets potentially having permissions that will allow someone to assign a paid seat (originally this wasn’t in any of the documentation).
So we’ve had to give super admin permissions to a specific user who really doesn’t need them and actually increases the exposure risk, not the news you were hoping for I know. Sorry to be the one to deliver it to you.
I’m hopeful that this will be refined at some point as it’s a really useful feature that suffers from this limitation.
