# Permissions question

**URL:** <https://community.hubspot.com/t/permissions-question/73844>\
**Category:** Account & Settings\
**Tags:** professional\
**Created:** [January 26, 2023, 4:21pm UTC](https://community.hubspot.com/t/permissions-question/73844 "2023-01-26T16:21:05Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![WBeasley](https://avatars.discourse-cdn.com/v4/letter/w/ebca7d/32.png) [@WBeasley](https://community.hubspot.com/u/WBeasley)\
**Post date:** [January 26, 2023, 4:21pm UTC](https://community.hubspot.com/t/permissions-question/73844/1 "2023-01-26T16:21:05Z")

</div>

I have invited a member of our team as a “view only” user in Hubspot, but somehow he is inadvertently creating new companies and contacts whenever he sends emails. Is there a permissions setting that I have overlooked? I don’t want him accidentally adding more contacts and companies to our database that shouldn’t be there.

---

<div class="post-metadata">

**Author:** ![karstenkoehler](https://d10pqhm3lwygmk.cloudfront.net/user_avatar/community.hubspot.com/karstenkoehler/32/68554_2.png) [@karstenkoehler](https://community.hubspot.com/u/karstenkoehler)\
**Post date:** [January 26, 2023, 4:23pm UTC](https://community.hubspot.com/t/permissions-question/73844/2 "2023-01-26T16:23:42Z")

</div>

Hi @WBeasley,

As far as I know, there isn’t any setting which would prevent this, unfortunately. Even with the most limited permissions, users can create records or use tools that create records.

I’ve requested strict view-only permissions in the HubSpot Ideas section before: [https://community.hubspot.com/t5/HubSpot-Ideas/Strict-view-only-permissions-for-users-restrict-access-to-all/idi-p/442316](https://community.hubspot.com/t5/HubSpot-Ideas/Strict-view-only-permissions-for-users-restrict-access-to-all/idi-p/442316)

If you could upvote, that makes review by the product team more likely.

Best regards!

---

<div class="post-metadata">

**Author:** ![WBeasley](https://avatars.discourse-cdn.com/v4/letter/w/ebca7d/32.png) [@WBeasley](https://community.hubspot.com/u/WBeasley)\
**Post date:** [January 26, 2023, 4:28pm UTC](https://community.hubspot.com/t/permissions-question/73844/3 "2023-01-26T16:28:55Z")

</div>

Never mind! Another admin added a plug in that was causing the issue.

---

<div class="post-metadata">

**Author:** ![karstenkoehler](https://d10pqhm3lwygmk.cloudfront.net/user_avatar/community.hubspot.com/karstenkoehler/32/68554_2.png) [@karstenkoehler](https://community.hubspot.com/u/karstenkoehler)\
**Post date:** [January 26, 2023, 4:31pm UTC](https://community.hubspot.com/t/permissions-question/73844/4 "2023-01-26T16:31:44Z")

</div>

Hi @WBeasley,

You can remove “App marketplace access” from user permissions to prevent this:

 ![karstenkoehler_0-1674750677311.png](https://d2qpr2jzcazej7.cloudfront.net/original/3X/2/a/2a30f68385bad7b45df11c56ab09c313afcebb3d.png)

Best regards!