Getting user permission and nested teams through API

HubSpot Ideas

Status: Idea Submitted

1

The User Provisioning API (Accounts Dashboard | HubSpot) can let us view Users, Teams, and Roles - but there is no endpoint to see the permissions associated with each role, nor can we see the association between the nested teams.

A few other articles exist on viewing the permissions here and here, and these have been marked “solved” with the resolution that the user should maintain the roles/permissions associations externally.

In my current scenario, we are setting up some integrated and automated means of user access reviews following POLP, the external maintenance solution is not acceptable. Any user with correct privilage could change HubSpot permissions without modifying the external reference, and there’s too much room for manual error in having someone copy over the permissions to a secondary document.

2

Hello,

Reagrading the issue you describe for the nested teams, I beleive we were confronted with a similar problem and found a workaround through process of elimintation of other fields:

Nested Teams = hs_user_all_accessible_teams - hs_user_secondary_teams - hs_user_assigned_primary_team

All fields are availble on the endpoint /crm/v3/objects/users.
However, I still do not understand which object is master with regards to the Teams information. Is it Hubspot Owner or Hubspot User.