Inbox permission should restrict sender email address
So far, inbox permission restrict only view of inbox. But it allows to send email from email address which user dosen't have persmission. We want to restrict not only to view inbox but also to create email.
This is something we have seen and been requested. Would be great to have the ability to choose the email to send from regardless of the previous reply.
This request has come up quite a bit and would be a nice improvement to managing permissions/access and streamline processes for all inboxes with multiple sending email addresses
It's kind of crazy that anyone in HubSpot can send an email from any connected email. What if I want to limit email sends from a sales@ email address to only the sales team? Or the same for customer support.
Tcxen, it feels downright negligent. For any company that has multiple departments or different teams in departments, this is a nonfunctional inboxing system. I cant have one team use another teams email as the "from" address, let alone letting an entirely different departments teams accidently use the wrong email.
User access for all objects should be at the pipeline level now that we have the helpdesk.
There should be access changes for inbox, users, teams, etc.,.
Instead there are a few instances where we can edit these using workaround methods that don't always work or only partially fix a problem.
@TimWalsh upon testing this with my team more recently it appears:
If you are a Super Admin, you'll have access to all inboxes and be able to send emails from those addresses.
All non-Super Admin users need to have explicit Access to the inbox to be able to send emails from those addresses - if they don't have explicit Access, the address is greyed out for them/they can't use it to send emails.
So I think the key here is:
Limit how many Super Admins you have (if they don't need god mode, give them a different permission set).
Give Inbox Access very sparingly - only those who need to view and send emails from those addresses.
But I think we still need a setting to choose a 'default' send from address if there are multiple available.
@TimWalsh I did some more testing with my team and it turns out:
Super Admins will always have the ability to send emails from any connected inbox, even if they haven't been given explicit access
Other users can only send emails from a connected inbox if they have been given explicit access to that inbox
So I would advise to check your user permissions:
limit the number of Super Admins for security in general
check access on each connected inbox to ensure only those users who need access to view the inbox + send emails as the inbox have access - remove everyone else (by default I think access is given to everyone which is a bit scary).
What I saw was that we added group inboxes for each department to the help desk (as required) and what happeneded was that anyone who was given access to any help desk pipeline suddenly had acces to all group inboxes attached to it.
Out of 60 seats I think 6 of them have super admin, everyone else is a user permissioned to their team. So I know it's at least not a super admin access issue.
In our experience with moving to Help Desk, we can no longer restrict channels to specific teams, and so all users have access to all channels / emails inside of Help Desk. This results in different teams making errors in their send email addresses pretty frequently. Although we've specifically outlined how to set the send address in Help Desk, this doesn't mean that people will remember and also adds friction.
We should be able to restrict who can use what channel / send address based on team or user.
You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.
