Possible to control ability to download reports containing sensitive data (PII)?

[DarceeCaron]

I'm trying to reconfigure our team's HS setup and user permissions to control who is able to download reports/forms that contain sensitive data (mostly personal identification information). I've seen that with setting permissions, it's possible to just completely eliminate the possibility to download/export records. However, what I really need is more nuance to allow users to download some reports with non-sensitive data, but not to download other reports which contain sensitive data.

Any thoughts or guidance would be very appreciated. 🙂

[DarceeCaron]

Hi Karsten,

Thank you so much for your reply.

Indeed, my challenge is not restrict view access, but specifically download access at both a report and user level. In other words we have users who can export some reports, but not others. 

So far all I'm not finding the ability to control download permissions with this level of granularity. Any other thougths?

Best,

Darcee

[karstenkoehler · Accepted solution]

Hi @DarceeCaron,

There are different ways to approach this. For one, you can set on a report level who has access under Menu > Reporting > Reports, or right when you save a report.

Not having the ability to report on something does however not mean that a user does not have access to information. They could still look this up or even export it, if they have export permissions.

You would have to make sure through user and field-level permissions that they can or cannot view information:

https://knowledge.hubspot.com/properties/restrict-view-edit-access-for-properties

https://knowledge.hubspot.com/user-management/manage-user-permissions

Best regards