User provisioning

Joiners, movers and leavers in one place

Stop granting access portal by portal. Add a person once, choose the permission set, teams and tools they need, and remove every one of those grants on their last day.

Example data, not a real portal

Users

Joiners, movers and leavers

PersonRole templatePortalsStage
starter-01@example.comSales rep3 portalsProvisioned
starter-02@example.comMarketing2 portalsAwaiting approval
mover-01@example.comService lead4 portalsRole change
leaver-01@example.comRead only6 portalsOffboarding
leaver-02@example.comSales manager1 portalAccess removed
Provisioning queue with example data.

Details

What provisioning covers

Central place to add users

Create a person once and choose which portals they belong to. No jumping between admin screens, and no portal quietly missed.

The right permissions from day one

Start from an approved role template so permission sets, team membership and super admin status match what the role is meant to have.

Roles and teams, set consistently

Assign the HubSpot permission set and team membership each portal needs, so access matches the job rather than whatever was copied from a colleague.

Effective offboarding

One leaver action removes the account from every chosen portal, verifies each removal and writes the whole sequence to the audit trail.

Records handed over, not orphaned

The preview counts the contacts, companies, deals and tickets the leaver owns in each portal, and removal requires either a nominated successor or an explicit decision to leave them unassigned.

Why it matters

Access granted in a hurry is rarely taken back

Consistent by default

Templates remove the guesswork, so two people in the same role do not end up with different rights.

Faster onboarding

New starters are productive on their first day without an administrator working through each portal by hand.

No orphaned access

Leavers are checked against every connected portal, so a forgotten account cannot keep its export rights.