HAC HubSpot Administrator User Permissions & Security 2 — Questions and Answers
Question 1: A sales manager wants to see all deals in the pipeline but not be able to delete any. Which permission combination achieves this?
- View All + Edit All on CRM objects
- View All + no Delete on CRM objects (Correct answer)
- View Only on CRM objects with no write access
- Edit All on CRM objects with Delete disabled separately
Correct answer: View All + no Delete on CRM objects
Setting View All without granting Delete on CRM objects lets the manager see all deals while preventing deletions.
Question 2: Which HubSpot feature allows an admin to require users to log in using their company's identity provider?
- Two-factor authentication
- Single Sign-On (SSO) (Correct answer)
- IP allowlisting
- User provisioning
Correct answer: Single Sign-On (SSO)
Single Sign-On (SSO) integrates HubSpot with an external identity provider so users authenticate through their company's system.
Question 3: A user is listed as a 'Super Admin' in HubSpot. What distinguishes this role from a standard admin?
- Super Admins can only manage billing
- Super Admins have all permissions and cannot be restricted (Correct answer)
- Super Admins can create other Super Admins only
- Super Admins control integrations exclusively
Correct answer: Super Admins have all permissions and cannot be restricted
Super Admins have unrestricted access to all settings and features and their permissions cannot be limited by other admins.
Question 4: When using teams in HubSpot, what is the primary purpose of assigning a user to a team?
- To grant billing access to that team's budget
- To control which records they own and filter reporting by team (Correct answer)
- To share login credentials among team members
- To restrict the user to a single pipeline
Correct answer: To control which records they own and filter reporting by team
Teams group users so that record ownership and reports can be filtered and segmented by team membership.
Question 5: An admin needs to prevent a specific user from exporting contact lists. Where is this setting controlled?
- Under Account Defaults in Settings
- Under the user's permissions in Users & Teams (Correct answer)
- Under Data Privacy settings
- Under Import & Export in CRM settings
Correct answer: Under the user's permissions in Users & Teams
The export permission is a toggle within the individual user's or permission set's settings in Users & Teams.
Question 6: What happens to records owned by a deactivated HubSpot user?
- They are automatically deleted after 30 days
- They remain in the CRM and can be reassigned to active users (Correct answer)
- They are archived and hidden from all views
- They transfer ownership to the account's Super Admin
Correct answer: They remain in the CRM and can be reassigned to active users
Deactivating a user does not delete their records; records stay in the CRM and an admin can reassign them.
Question 7: Which permission is required for a user to create and publish workflows in HubSpot?
- Marketing Access > Campaigns
- Automation > Workflows (Correct answer)
- CRM > Edit All
- Content > Website Pages
Correct answer: Automation > Workflows
The Automation > Workflows permission specifically controls who can create, edit, and activate workflows.
HAC HubSpot Administrator User Permissions & Security 2
A sales manager wants to see all deals in the pipeline but not be able to delete any.
Which permission combination achieves this?