On the contact views, there’s a view called All Contacts which is default created by HubSpot.
I have an user in one team only, but if he adds that view, he can see all of the other teams contacts. His permission sets allow him to only view his teams contacts… so the default view overrides all of the permissions.
Is there any way to hide this default “All Contacts” view?
The goal is for the user to only have access to contacts on their team, not the whole company.
Normally, that is not the case. The contact index page will only show those records to a user which they have access to, regardless of whether it’s the all contacts tab or any other view.
If a user is seeing records that you think they shouldn’t be seeing, this is likely a permission configuration issue. Can you confirm that this user is with 100% certainty not in the same team as other users owning those contacts? Have you also checked the extra/additional teams?
Could you please share a screenshot of the contact access permissions of this user?
There is a small chance that this is a bug but it’s more likely that the permission is either not configured correctly or that the user shares a team with other owners.
If you’re convinced this is a bug, you can of course also reach out to HubSpot support directly in-app, via chat or email.
If that user goes the CRM → Contacts, clicks + Add view and selects the default All contacts view, in that view he’s able to view the contacts of the every single team that exists.
Users main team is a “nested” team within another team, and the user has no extra teams assigned.
The team layout looks like this:
1) Main Sales team → within it there are 2 nested teams (Team A and Team B), each of those has another set of nested teams (Team A1, Team A2 etc). The user is in the Team A1.
Moreover, I have a separate team which is not nested, basically on a side, not part of the Main Sales team , and the user can also see that side teams contacts in the All Contacts view.
If that user goes the CRM → Contacts, clicks + Add view and selects the default All contacts view, in that view he’s able to view the contacts of the every single team that exists.
Thank you for the screenshot – how exactly are you validating this? Have you checked whether the permissions include unassigned contacts? (Click into the permissions, your screenshot only shows summaries.)
Have you had the user try and open a contact record that is definitely assigned to someone outside of their team?
From a distance, it’s hard to investigate this, without the ability to review the settings, see the teams and check record access.
Since you’re obviously on a Professional or Enterprise subscription, I’d recommend reaching out to HubSpot support directly.
Hey Karsten,
Thanks again - Yes - the user can click on the Contact owned by someone from another team, Add Deals/Leads to that contact etc… even though his associations permissions are also off
I understand this is probably a bug and will try reaching out to HS directly. Here’s a detailed screenshot of the said users permissions.
Then something is either wrong with the permissions or the user is a member of additional teams which means he/she would also see those contacts. Or they these contacts have been shared with the user.
As a rule, views of any kind do not override permissions.