What This Update Actually Is
HubSpot added a dedicated Access tab to every User Record. That tab lists all enabled permissions for that human, the levels of access within each permission, and how that access was granted.
There are two grant types the tab will show: individually assigned permissions and Custom Permission Sets. Custom Permission Sets are an Enterprise-only feature, so that label only appears for portals on Enterprise tiers.
The list is filterable by type of access, which means you don't have to scroll through a wall of permissions to find the one you're looking for. Before this update, admins had to open the full permissions editor just to confirm what was already enabled for a given user. That extra step is now gone.
Why HubSpot Shipped This
Managing a growing HubSpot portal means managing a growing number of humans with different roles, different hub access, and different permission combinations. When something goes wrong, whether a rep can't see a contact or a manager pulls a report they shouldn't, the first thing an admin does is pull up a user and try to understand their access.
The old workflow required opening the permissions editor, which is built for editing, not reviewing. It wasn't designed for a quick audit. So admins were using an editing tool to do read-only research. That mismatch slowed everything down.
HubSpot addressed that friction by putting the read-only view where it belongs: on the record itself. The update separates the act of reviewing access from the act of changing it. That's a sensible design decision, and it's long overdue.
How to Use It Step by Step
- Go to Settings in your HubSpot portal.
- Navigate to Users and Teams, then open the Users table.
- Select any user from the table to open their User Record.
- Click the Access tab at the top of the record.
- Review the list of enabled permissions. Each permission shows the level of access granted within it.
- Use the filter to narrow the list by type of access, for example, CRM objects, reporting, or content.
- On Enterprise portals, look for the grant-type label to confirm whether access came from an individual assignment or a Custom Permission Set.
That's it. No editing required, no digging into separate menus. Review and move on.
What It Touches in Your HubSpot Strategy
This update lives in the CRM's admin layer, but its ripple effect touches nearly every hub. Permissions govern what humans can see, create, edit, and delete across contacts, deals, tickets, reports, and more. A faster way to audit permissions means a faster way to troubleshoot almost anything.
Key Takeaway
If your portal has more than ten users, a quarterly permissions audit is a best practice. This update makes that audit fast enough that there's no excuse to skip it.
Security and Compliance
For companies in regulated industries or those running SOC 2 audits, this tab is genuinely useful. You can document what a user could access at a specific point in time without exporting anything or navigating multiple screens. Screenshot the Access tab, timestamp it, done.
Onboarding New Humans
When you bring a new sales rep or marketing coordinator into your portal, the Access tab gives you a clean confirmation view after setup. You've granted the permissions, now you can verify them without re-opening the editor.
This fits naturally into the kind of structured onboarding sequence we describe in our honest look at what a real HubSpot onboarding timeline looks like. Getting permissions right in week one prevents a lot of headaches in month three.
Enterprise Permission Sets
Enterprise portals using Custom Permission Sets get extra value here. When access is set via a permission set, the Access tab surfaces that relationship clearly. Admins can see at a glance that a user's CRM access flows from a Permission Set, not an individual assignment. That distinction matters when you're troubleshooting inconsistent access across a team.
Integration and OAuth Context
If your portal is working through the granular OAuth scopes migration, having cleaner user-level permissions visibility helps you confirm that access boundaries are set correctly before and after scope changes. These two updates are worth reviewing together.
Key Takeaway
Permissions audits aren't just an IT task. RevOps leaders should own this process because incorrect access is often the silent cause of data quality problems in CRM reports.
CRM Record Hygiene
This update is part of a broader push HubSpot has been making to surface more useful information directly on records, without requiring extra clicks. The Customizable Title Card on CRM Records is another example of that pattern. HubSpot is making records more information-dense, and admins should start thinking about how to take advantage of that.
Who Should Care Most
This update has a clear primary audience and a few secondary ones.
- HubSpot Admins managing 10 or more users who spend real time troubleshooting access questions from their teams.
- RevOps leaders who run quarterly audits to ensure data integrity and consistent CRM behavior across departments.
- Enterprise teams using Custom Permission Sets who need to confirm that permission inheritance is working as expected.
- Growing companies in the 20 to 200 employee range where the user list is expanding faster than the admin process.
- Consultants and agencies doing portal health reviews for clients who need a fast way to document what access looks like today.
If you're a solo admin running a small portal with three humans and static roles, this will still make your life a bit easier. But the compounding benefit shows up as your user list grows.
George's Take
I've done enough portal health checks to know that permissions drift is one of the most common and most underestimated problems in HubSpot. Humans change roles, companies grow, someone gets promoted and their access never gets updated. Over time, that drift creates real data quality problems, reporting gaps, and security risk. We've seen portals where a third of the active users had access levels that didn't match their current role. This update doesn't fix drift on its own, but it removes the friction that keeps admins from catching it early. When a review is easy, reviews actually happen.
“Permissions drift is silent. You don't notice it until a rep sees a deal they shouldn't, or a report looks wrong and nobody knows why. This update gives admins a fast way to check before it becomes a real problem.”
If your portal has grown beyond a handful of humans and you haven't done a permissions audit in the last 90 days, this is a good moment to start. Open a few User Records, click the Access tab, and see if what you find matches what you expect.
If you want help building a permissions framework that actually scales with your team, or if a portal health check is already overdue, let's talk. Book a strategy call with the Sidekick team and we'll help you build the kind of HubSpot foundation that lets your whole organization flourish.
Frequently Asked Questions
Where do I find the new permissions visibility in HubSpot?
Go to Settings, then Users and Teams, and open the Users table. Click any user to open their User Record, then select the Access tab. You'll see a filterable list of all enabled permissions and the level of access granted within each one. No need to open the permissions editor.
Does the improved permissions visibility work on all HubSpot tiers?
Yes. The Access tab on User Records is available for all hubs and all tiers, including free and starter accounts. The only feature limited by tier is the Custom Permission Set grant-type label, which only appears on Enterprise portals since Custom Permission Sets are an Enterprise-only feature.
What is the difference between individually assigned permissions and a Custom Permission Set in HubSpot?
Individually assigned permissions are configured per user. A Custom Permission Set is a saved group of permissions applied to multiple users at once, available on Enterprise only. The Access tab now shows which method granted each user's access, making it easier to understand where permissions come from and how to adjust them.
Can I use the Access tab to edit user permissions?
No. The Access tab is a read-only view. It's designed for reviewing and auditing permissions, not changing them. To edit a user's permissions, you still go through the permissions editor as you normally would. Separating the review view from the editing experience is the core improvement this update delivers.
How often should I audit user permissions in HubSpot?
A quarterly review is a solid baseline for most growing teams. If your company is hiring quickly, going through a restructure, or has experienced turnover, audit permissions monthly. Permissions drift, where a user's access no longer matches their role, is a common cause of data quality problems and reporting gaps in HubSpot portals.
Does this update affect how HubSpot reports on user access?
This update doesn't add new reports, but it makes manual auditing faster. You can use the Access tab to review and document individual user permissions without navigating multiple screens. For teams needing a full access inventory, reviewing each User Record's Access tab and exporting notes is now a much more practical workflow.
