What can an AI agent do with
Manage HubSpot users and permissions?
Lets the agent add users to your HubSpot account, change their permissions and roles, and delete users.
How to spot it
On a HubSpot connection or settings screen, this is settings.users.write.
With it, an agent can
- Create new users
- Assign permissions and roles
- Delete existing users
It cannot, on its own
- Change CRM records (separate permissions)
What a bad day looks like
A tricked agent gives an outsider an account with broad permissions or removes your staff's access.
Set it up safer
- Grant settings.users.read if it only needs to see who has access
- Keep user management with a human admin
Ask the company selling the agent
- Why does the agent need to manage users?
- Will it ever create accounts or change roles on its own?
- Is every user change logged?
Source
Checked against HubSpot documentation on 2026-09-28. All HubSpot permissions →
Thinking about a specific agent?
Tell us what it connects to, what it is allowed to do and who approves its work. You get a plain-language label of what it can touch and what to ask the seller. It takes a couple of minutes, and your answers stay in your browser unless you choose to post a test job.
Or have a person go through the AI apps on up to 3 of your business services with you and get a written report, for $249.
This page explains what a permission allows. It does not describe, test or rate any product. Permission details are summarized in our own words from the provider's documentation, linked on the page; providers change their documentation, so check the source before you rely on a detail.