We use cookies to make HubSpot's community a better place. Cookies help to provide a more personalized experience and relevant advertising for you, and web analytics for us. To learn more, and to see a full list of cookies we use, check out our Cookie Policy (baked goods not included).
Do not allow non-admin users to access and view other users within the Portal.
If a user does not have the permission allowed for Account Access - they should not be able to view User and Team information!
For portals where we are supporting internal and external users, emails and access levels are displayed.
I see this being a significant security issue - for:
1. Sharing emails and contact details with users who should not have access to this information
2. Providing details for admin users that if a users account was compromised could be used to try and get other access