Problem
Many HubSpot features, tools, and settings only offer broad access levels, where users either have no access or full edit access. While some assets support more granular sharing, this permission model is not consistent across the platform.
For example, Account & Billing pages currently don’t offer a view-only permission. Similarly, many other features and settings don’t allow administrators to grant read-only access or specify different permission levels for different teams.
This makes it difficult to follow the principle of least privilege, especially in larger organizations where users often need visibility into settings or assets without the ability to modify them.
Proposed Solution
Introduce a consistent permission model across all HubSpot features, tools, pages, and settings that supports:
- No access
- View only
- View & edit
Additionally, when granting access to selected users or teams, administrators should be able to assign permissions individually, such as:
- Team A – View only
- Team B – View & edit
- User C – View only
- User D – View & edit
This model should apply consistently wherever permissions can be configured, including product features, settings pages, assets, and administrative tools.
Benefits
This enhancement would:
- Give administrators much more granular control over user access.
- Improve security by limiting edit permissions to only those who need them.
- Better support organizations with multiple departments and regional teams.
- Reduce the risk of accidental configuration changes.
- Eliminate the need to grant unnecessary edit access just so users can view information.
- Create a consistent and intuitive permission model across the entire HubSpot platform.
A standardized permission framework with View Only and View & Edit access for individual users and teams would make HubSpot significantly more flexible for organizations of all sizes while improving governance and security.