# sandbox- permissions

**URL:** <https://community.hubspot.com/t/sandbox-permissions/134774>\
**Category:** Tips, Tricks & Best Practices\
**Tags:** crm\
**Created:** [June 19, 2025, 6:51am UTC](https://community.hubspot.com/t/sandbox-permissions/134774 "2025-06-19T06:51:32Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![Ds-ELAMIR](https://avatars.discourse-cdn.com/v4/letter/d/ecb155/32.png) [@Ds-ELAMIR](https://community.hubspot.com/u/Ds-ELAMIR)\
**Post date:** [June 19, 2025, 6:51am UTC](https://community.hubspot.com/t/sandbox-permissions/134774/1 "2025-06-19T06:51:32Z")

</div>

hello everyone, now we have license to create sand box

the idea is to allow 3rd party to check our workflows , etc without getting access to our company data or client data, any tips or suggestiond for this ?

---

<div class="post-metadata">

**Author:** ![karstenkoehler](https://d10pqhm3lwygmk.cloudfront.net/user_avatar/community.hubspot.com/karstenkoehler/32/68554_2.png) [@karstenkoehler](https://community.hubspot.com/u/karstenkoehler)\
**Post date:** [June 19, 2025, 6:55am UTC](https://community.hubspot.com/t/sandbox-permissions/134774/2 "2025-06-19T06:55:20Z")

</div>

Hi @Ds-ELAMIR,

You have full control over which records a sandbox user sees, please see this documentation: [HubSpot user permissions guide](https://knowledge.hubspot.com/user-management/hubspot-user-permissions-guide)

Specifically, you would limit record visibility to owned records only – if these users do not have record create permissions, that would effectively mean they cannot see any records.

Best regards!

---

<div class="post-metadata">

**Author:** ![Nhal](https://d10pqhm3lwygmk.cloudfront.net/user_avatar/community.hubspot.com/nhal/32/206123_2.png) [@Nhal](https://community.hubspot.com/u/Nhal)\
**Post date:** [June 30, 2025, 5:21am UTC](https://community.hubspot.com/t/sandbox-permissions/134774/3 "2025-06-30T05:21:50Z")

</div>

Great to hear you’ve got access to the sandbox! That’s a smart move for testing things without risking your actual data. Quick question; are you planning to fully clone your portal into the sandbox, or just set up the main workflows you want them to review? A solid approach is to create the sandbox, leave out any personal or client info, and then build a simple mock dataset with fake contacts, deals, and companies. This gives your third-party partner a clean space to test while keeping everything safe. Also, take a minute to check their user permissions so they only access what’s needed. Let me know if you want help setting up the mock data or access levels.