⚙ Operations Hub

SPatti
Participant

User Permissions

SOLVE

Hi, I am working on restructuring the user permissions for my users and teams and changing the permissions sets ( permissions ). what is the best way to deal with that. 

1. How to create a best framework to handle this case.

2. Best way to reassign the permissions for permission set and users rto explain to the management.

3. Users have some unnecessary permissions for them. I am thinking how to anlayse themand best way to reassign so that i dont get request back to assign permissions back.😊

0 Upvotes
1 Accepted solution
karstenkoehler
Solution
Hall of Famer | Partner
Hall of Famer | Partner

User Permissions

SOLVE

Hi @SPatti,

 

Regarding a framework, I'd recommend working with a template like the one shared here: https://community.hubspot.com/t5/Tips-Tricks-Best-Practices/Assistance-managing-multiple-teams-roles...

 

It might not be fully up to date anymore but can be easily adjusted and helps seeing at a glance how permissions set differ.

 

Generally, I would recommend following a principle of least privilege: https://en.wikipedia.org/wiki/Principle_of_least_privilege

 

This also makes it easy explaining and justifying permission decisions to management.

 

Lastly, if you're following the principle mentioned above, it makes sense to always lean more towards fewer than more permissions. Users can always request more permissions if they need them.

 

Make sure to consider well whether you want to extend property settings, workflows, export and import permissions. All of these can potentially create a lot of damage by risking data integrity or security.

 

Let me know if you have any follow-up questions!

Karsten Köhler
Digital Marketer | HubSpot Freelancer | CRM Consultant

Beratungstermin mit Karsten vereinbaren


Did my post help answer your query? Help the community by marking it as a solution.

View solution in original post

2 Replies 2
karstenkoehler
Solution
Hall of Famer | Partner
Hall of Famer | Partner

User Permissions

SOLVE

Hi @SPatti,

 

Regarding a framework, I'd recommend working with a template like the one shared here: https://community.hubspot.com/t5/Tips-Tricks-Best-Practices/Assistance-managing-multiple-teams-roles...

 

It might not be fully up to date anymore but can be easily adjusted and helps seeing at a glance how permissions set differ.

 

Generally, I would recommend following a principle of least privilege: https://en.wikipedia.org/wiki/Principle_of_least_privilege

 

This also makes it easy explaining and justifying permission decisions to management.

 

Lastly, if you're following the principle mentioned above, it makes sense to always lean more towards fewer than more permissions. Users can always request more permissions if they need them.

 

Make sure to consider well whether you want to extend property settings, workflows, export and import permissions. All of these can potentially create a lot of damage by risking data integrity or security.

 

Let me know if you have any follow-up questions!

Karsten Köhler
Digital Marketer | HubSpot Freelancer | CRM Consultant

Beratungstermin mit Karsten vereinbaren


Did my post help answer your query? Help the community by marking it as a solution.

SPatti
Participant

User Permissions

SOLVE

Thanks again for your wonderful work . I posted one more query regarding properties clean up. plz follow up on that query.

https://community.hubspot.com/t5/128172-RevOps-Discussions/Properties-Cleanup/m-p/717937#M1565 

0 Upvotes