Hi, I am working on restructuring the user permissions for my users and teams and changing the permissions sets ( permissions ). what is the best way to deal with that.
1. How to create a best framework to handle this case.
2. Best way to reassign the permissions for permission set and users rto explain to the management.
3. Users have some unnecessary permissions for them. I am thinking how to anlayse themand best way to reassign so that i dont get request back to assign permissions back.
Hi @SPatti,
Regarding a framework, I’d recommend working with a template like the one shared here: https://community.hubspot.com/t5/Tips-Tricks-Best-Practices/Assistance-managing-multiple-teams-roles-and-permissions-In/td-p/433030
It might not be fully up to date anymore but can be easily adjusted and helps seeing at a glance how permissions set differ.
Generally, I would recommend following a principle of least privilege: https://en.wikipedia.org/wiki/Principle_of_least_privilege
This also makes it easy explaining and justifying permission decisions to management.
Lastly, if you’re following the principle mentioned above, it makes sense to always lean more towards fewer than more permissions. Users can always request more permissions if they need them.
Make sure to consider well whether you want to extend property settings, workflows, export and import permissions. All of these can potentially create a lot of damage by risking data integrity or security.
Let me know if you have any follow-up questions!
Thanks again for your wonderful work . I posted one more query regarding properties clean up. plz follow up on that query.
https://community.hubspot.com/t5/128172-RevOps-Discussions/Properties-Cleanup/m-p/717937#M1565