Great minds think alike

As an agency working with many security-minded clients, many do not want to give our team "unnecessary" permissions outside the scope of a particular project. Especially for developers, it is awkward to request that "Account Access" needs to be granted just so that our developers can create a table in a portal, especially when read/write/publish permissions already live within the marketing tab.   Consolidating HubDB settings to a single tab, or adding the create/clone/delete toggle to the marketing tab would make permission management much easier.   ...read more

Background: Objects are owned by/assigned to users.   Permissions are set at the user level and restrict access to objects (contacts, deals, tickets). Available permissions: Everything Team only (user can see all objects it owns AND objects owned by other users in the user's teams) Owned only None The problem: The 'team only' permission is flawed when a user is a member of 2 (or more) teams This is because members of the 2 teams can see all objects assigned to the user. This is problematic because some objects owned by the user should be visible to 1 team only Pracitcal example: An EU-based user is a memebr of 2 teams Team 1: consists solely of EU-based users who process tickets for EU clients (data protection laws & client contracts mean EU client data can only be accessed by EU-based users) Team 2: consists of both EU-based and non-EU-based users who process tickets for non-EU clients (there's no restriction on EU-based users accessing non-EU client data, meaning the EU-based user can be a member of Team 1 and Team 2) The 'team only' permission fails because any object assigned to the EU-based user is visible to all users in Team 1 (EU) and Team 2 (non-EU). This means non-EU used see EU-onlu data, so breaches data law & contractual commitments   The solution: The solution is to allow objects to be owned by teams. The 'Team only' permission would need to look at which team an object is assigned to and grant access to users who belong to that team.   It would still be possible for a user to own an object, as this is useful in other scenarios. However, it would not be possible for an object to be owned by a user and a team simultaneously, they would be mutually exclusive. ...read more

To ensure that our portals follow data protection best practices, we would like to be able to make a user inactive and essentially revoke access after x number of days. So if a user hasn't logged in for 90 days then their access should become inactive and require an admin reset. This would assist us in managing user access and protect our data. This allows team members who shifted role or left the business to have their access expire in case they were not removed and seems to be good practice on secure platforms. ...read more

Hi there,   We recently configured SCIM with Okta for our organization. Previously we had roles & rights assigned manually, including 3 of our Super Admins that also had a Sales Enterprise seat. In configuring SCIM, I assigned each of our Super Admins the corresponding role 'Super Admin'. However, once the provisioning was activated, they lost access to their sales enterprise seat. According to support, there is currently no way for a user to have both the super admin role assigned in Hubspot, as well as access to a paid sales enterprise seat, when SCIM is activated. Therefore my request is:   - Please create a super admin role that includes a sales enterprise seat or allow super admins to toggle the sales enterprise seat on or off for the role ...read more

I would suggest that the pixels somehow be linked to the original email address(s) they where sent to and need to be filtered hubspot server and our preference settings as to what gets pushed out to our phones or PC apps and if its a bot doing a virus scan opening or just someone that has left my mail at the top of their inbox and it get opened each time they look at email I only want to see 1 notification every hour ...read more

Hi, It would be interesting to be able to restrict access to the "goals" page, accessible via "parameter" and then "reports". From the user rights management page for example. This would prevent everyone from being able to consult each seller's revenue targets. These objectives are often confidential. Do you think this could be possible? Thank you in advance. Best regards. Yoann ...read more

Hello team HubSpot, We're using the Azure SSO and users are having issues with the sign in. To give you a background, we somehow have four HubSpot Enterprise applications registered under Azure. This isn’t the the best practice and I want to get rid of this. I enabled SSO on one of the app and decided to disable other three apps. As a result some of the users got effected and faced issues doing sign in and disconnection of inbox and calendar. My concern is could please link all hubspot services to the one app where we are using SSO and unassociated all the other apps . ...read more

The Deal object allows you to use logic based on pipeline to customize the create Deal form. The Record Customization tab allows you to customize the view of a specific object/record based on Teams.   Taking these two features together, it would be very helfpul to be able to costumize the Object Form (Contact, Company, Deal) based on Team.    As of now, we have a ton of fields in the form that are only needed for specific roles, so adding this feature would drastically reduce friction when creating objects ...read more

It would be very helpful to be able to export a users lists along with what teams they are on, their roles and/or permissions. In order to do a user audit now I have to look at each user separately and create a spreadsheet by hand. Not the most effective method as we get larger and onboard more teams into HS.  ...read more