HubSpot Administrator User Permissions & Security Flashcards

What is the effect of enabling 'Require 2FA for all users' at the account level in HubSpot?

Answer: All users must enroll in 2FA on their next login or lose access

Enabling account-level 2FA enforcement requires all users to complete 2FA enrollment before they can access the portal.

A sales rep should only see and edit contacts they personally own. Which permission setting achieves this?

Answer: View Own, Edit Own

'View Own, Edit Own' limits the user to records assigned to themselves, preventing access to other reps' contacts.

Which HubSpot log allows admins to track which user deleted a contact record?

Answer: Audit Log

The Audit Log records security and administrative actions including record deletions, showing the user responsible.

A user needs to manage chatflows but should not have access to email marketing. How should an admin configure this?

Answer: Create a custom permission set with Conversations enabled and Marketing Email disabled

Custom permission sets allow granular control, enabling Conversations access while leaving Marketing Email permissions off.

What does the 'Publish' permission for website pages allow a HubSpot user to do?

Answer: Create, edit, and publish live website pages

The Publish permission for website pages grants the user the ability to create, edit, and take pages live on the site.

An admin notices a user has been accessing the portal from an unrecognized country. Where in HubSpot can they investigate this?

Answer: Audit Log in Security settings

The Audit Log under Security settings records login events including IP addresses and geographic locations for each user.

When a HubSpot admin sets a user's CRM permission to 'View Team,' what records can that user see?

Answer: Records owned by anyone on their assigned team(s)

'View Team' scope grants visibility into records owned by members of the same team(s) the user belongs to.