What This Update Actually Is
Before this update, permission sets and seats were tightly coupled. That meant you could only assign a user to a permission set if their seat type supported every permission in that set. If it didn't, HubSpot would either block the assignment or quietly remove the user later.
Now HubSpot evaluates access with a simple formula: a user's actual access equals their permission set multiplied by their seat. If the seat doesn't support a specific permission, that permission is simply not granted. The user stays in the permission set either way.
Three things are now true that weren't before. Users can exist in any permission set with any seat type. Admins see a clear indicator of no access, partial access, or full access per user. And when a user's seat changes, their permission set assignments stay intact and access updates automatically.
Why HubSpot Shipped This
The old behavior created real operational pain. Admins hit errors when assigning users to permission sets. Humans lost access unexpectedly after a seat change, often without a clear reason. And two humans in the same permission set could have completely different access with no obvious explanation in the UI.
That last problem was especially bad for RevOps and sales ops teams. When access is unpredictable, admins spend time troubleshooting instead of building. Humans in the field lose trust in the system. Onboarding new team members gets complicated fast.
HubSpot's answer was to stop treating the seat as a gatekeeper for permission set assignment. Instead, the seat now acts as a filter on what access is actually granted. It's a cleaner mental model, and it removes a category of admin errors entirely.
How to Use It Step by Step
- Go to Settings, then Users and Teams, and open any user's profile.
- Assign or review permission sets for that user. You can now assign any permission set regardless of the user's current seat type.
- Check the access indicator next to each permission set. HubSpot will show full access, partial access, or no access depending on how the seat and permission set interact.
- If the indicator shows partial access, click in to see which specific permissions are unavailable due to seat limitations.
- Decide whether to upgrade the user's seat for full access or leave partial access if it fits your business needs. Both choices are valid.
- If a seat change happens later, confirm the permission set assignment is still in place. It should be automatic, but a quick audit after seat changes is good practice.
What It Touches in Your HubSpot Strategy
This update ripples into more places than it first appears. Permissions governance touches every hub. If your portal has humans across Sales Hub, Service Hub, and Marketing Hub, you've likely had seat-type mismatches create access gaps at some point.
Key Takeaway
Admins can now build a single permission set architecture and apply it consistently, regardless of what seat mix your org runs. That's a meaningful simplification for any portal with more than 10 users.
User Onboarding and Offboarding
Onboarding new humans into HubSpot gets simpler. You can assign the right permission set on day one without worrying about whether their seat type will block the assignment or cause a silent removal later. Offboarding is cleaner too: seat downgrades won't unexpectedly strip permission set context.
Permissions confusion is one of the most common HubSpot onboarding problems we see. If you're rebuilding your user setup from scratch, the 7 biggest HubSpot onboarding mistakes article walks through the patterns that cost companies the most time and money.
RevOps and Admin Workflows
RevOps teams who manage permissions at scale will feel this the most. Fewer one-off exceptions. Fewer support tickets from humans who suddenly can't access a view or report. And clearer documentation: when you can see partial vs. full access in the UI, you can actually explain the permission structure to stakeholders.
Key Takeaway
The partial access indicator is the most underrated part of this update. For the first time, you can see exactly which permissions are blocked by a seat limitation without going back and forth between the seat matrix and the permission set editor.
Training and Adoption
Clearer permissions mean clearer role expectations. When your team training curriculum maps roles to permission sets, this update makes that mapping more stable. Seat changes won't break the training context. If you're building a formal HubSpot training program, the complete guide to building a HubSpot team training curriculum is worth reviewing alongside this permissions redesign.
Who Should Care Most
This update is most valuable to the humans closest to portal administration and team scaling.
- HubSpot admins managing 15 or more users who have hit the seat-mismatch error wall and spent hours untangling access.
- RevOps and sales ops leaders who own the permission architecture across multiple hubs and need consistency across seat types.
- Growing companies that add and change seats frequently as they hire, so permission set assignments don't have to be rebuilt every time a seat tier changes.
- Agencies and consultants managing multiple portals who need a predictable, auditable permissions model to hand off to clients.
If your portal has fewer than five users and you've never hit a permissions conflict, this update will likely feel invisible. That's fine. It's doing exactly what it should.
George's Take
I've seen this problem in portal after portal. An admin sets up a clean permission architecture, a seat change happens six months later, and suddenly a sales rep can't see the reports they've been using for a quarter. Nobody touched the permission set. The seat change did it silently. That's not a user error, that's a system design problem. HubSpot fixed the design. The access indicator is the piece I'm most excited about, because it turns a frustrating guessing game into a simple yes, partial, or no answer. Admins can now actually govern permissions instead of just react to them.
“The best permission system is the one nobody has to think about. This update gets HubSpot a lot closer to that.”
Pair this with the recent Quick Filter Bar redesign and you've got a CRM that's becoming meaningfully easier to manage at the admin level, not just the individual user level.
If your portal has grown past 10 users and your permission sets feel like a patchwork of workarounds, this is a good moment to audit and rebuild them properly. We help teams do exactly that. Book a strategy call with Sidekick and we'll map your current permission architecture, spot the gaps, and build a structure that'll actually hold as you scale.
Frequently Asked Questions
What does it mean that HubSpot decoupled permission sets from seats?
It means you can now assign any user to any permission set regardless of their seat type. Previously, seat type restricted which permission sets a user could belong to. Now, HubSpot calculates actual access by combining the permission set and the seat, granting only what the seat supports while keeping the permission set assignment intact.
Will users lose access if their seat changes after this update?
No. Under the new logic, permission set assignments stay in place when a seat changes. Access updates automatically based on what the new seat supports. If the new seat supports fewer permissions, the user gets partial access rather than being removed from the permission set entirely.
What does partial access mean in HubSpot permission sets?
Partial access means a user is assigned to a permission set but their seat type doesn't support every permission in that set. HubSpot grants only the permissions the seat allows and shows a partial access indicator in the UI. Admins can review exactly which permissions are blocked and decide whether to upgrade the seat.
Who can see and manage the new permission access indicators?
Portal super admins and any admin with user management permissions can see the full, partial, or no access indicators in the Users and Teams settings. The indicator appears next to each permission set assignment and links through to a breakdown of which specific permissions are limited by the user's seat.
Does this update affect all HubSpot hubs and tiers?
Yes. HubSpot confirmed this update is available across all hubs and all tiers, including Free and Starter. The change applies to the underlying permissions engine, so every portal benefits from the new assignment logic and the clearer access indicators regardless of subscription level.
Do I need to rebuild my existing permission sets after this update?
No rebuild is required. Existing permission sets and assignments carry over. However, this is a good time to audit your permission architecture. Users who were previously blocked or removed from permission sets due to seat mismatches can now be reassigned correctly, and you can use the new indicators to spot any remaining access gaps.
