Expose association label creation as a configurable permission for other roles besides SuperAdmin
I would be mind-blown if someone hasn't already created a post about this, so if someone has, feel free to let me know. Right now, as far as I can tell, the fairly basic action of creating an association label is a feature that is only exposed to Super Admins. That is a massive security concern. In order for our users to use this feature, we now have to give them complete and unfettered access to our Hubspot account? We (as I'd imagine most security-concious organizations do) heavily restrict access to the SuperAdmin role due to the dangerous actions that can be performed with that role and don't even allow our Hubspot Administrator to have SuperAdmin access by-default (She has nearly every other permission besides user management, bulk data export access, and a few other potentially hazardous actions). Historically Hubspot's granular permissions have been really solid and allow for least-privilege principles to be applied, but this is a big outlier that (IMHO) needs to be fixed ASAP. Please expose association label creation as a configurable permission for other roles besides the SuperAdmin role.
I completely support this idea. It should be possible to allow creation of certain objects, labels, associations that is currently possible only as Super Admin. Right now, this is possible only as Super Admin (under Professional License). This is not a prudent set up and exposes critical data that the Super Admin would not want to hand over to an Admin. Kindly make this feature available asap.
Agreed, in fact I can't believe more people haven't asked for this to be actioned... Surely big organisations using this platform would be sensitie to the capabilities of a Super Admin role be assigned to a user without understanding the risk. As a new cutomer, we will now need to put a service desk process in place to request elevation to Super Admin at the time the user needs to work on these associations.
