Your agency or consulting partner asks for access to your HubSpot portal, and suddenly you are in unfamiliar territory. Do you create them a user account? Does it cost a seat? What can they see? A partner sends you a cryptic invite link — is clicking it safe, and which of your two portals does it grant access to?
These are the questions HubSpot customers ask every time a partner engagement starts, and the answers matter: grant too little access and the engagement stalls on day one; grant too much (or the wrong kind) and you have handed over the keys to billing, admin settings, and sensitive data.
This guide covers how partner access actually works in HubSpot, the three ways to grant it, what partner admins can and cannot do, and the mistakes that cause the most day-one friction.
Grant partner access through HubSpot's Partner Admin system — not by making your partner a Super Admin. The fastest path: the partner employee sends you a Partner Admin access link; you click it, approve, and select the HubSpot account they should access. Partner Admins work in your portal without consuming a paid seat, but they cannot manage Super Admins, change billing, or handle sensitive data. You need Super Admin or "Add and edit users" permissions to approve access. If your organization has multiple HubSpot accounts, double-check you are approving access to the right one. Vantage Point, a HubSpot Solutions Partner, uses this exact flow when onboarding new clients.
HubSpot maintains a dedicated access model for its Solutions Partners (agencies and consulting firms in the partner program). A Partner Admin is a partner employee who can manage your HubSpot account and assign permissions to other partner employees — without consuming one of your paid seats. Access is tied to the partner's own HubSpot identity, which makes it auditable: every action in your portal is attributed to a named person at the partner firm, and revoking access is a settings change, not a password reset.
This is meaningfully safer than the two shortcuts teams reach for instead: sharing a login (never do this) or making the partner a Super Admin (which grants billing and account-level control most partners neither need nor want the liability of).
One housekeeping note: as of January 13, 2026, HubSpot moved all existing Partner Admin users to a standard Partner Admin permission template. If you granted partner access before that date and haven't looked since, review who currently holds Partner Admin permissions in your account — it is a five-minute audit worth doing.
HubSpot supports three paths. All of them require you to have Super Admin permissions or "Add and edit users" permissions yourself.
The most common flow at the start of an engagement:
If the partner employee is already a Super Admin in your account (common with long-standing relationships), either the partner can migrate themselves from their Partner account, or you can edit their user permissions and change them to the Partner Admin permission set. This is worth doing — it removes account-level powers they don't need while keeping their working access intact.
You can also set it up yourself: go to Settings → Users & Teams → Create user, enter the partner employee's email, choose Start with a template, and select Partner Admin. The template only appears for eligible partner employees — if the person isn't registered as an employee of a HubSpot Solutions Partner, the option won't display, which is HubSpot quietly protecting you from misusing the role.
For all three paths, remember the prerequisite: the partner employee must hold a Partner Seat in your account before they can be made a Partner Admin.
The permission set has deliberate ceilings. Partner Admins cannot:
For most implementation and optimization work — building workflows, pipelines, reports, integrations, page layouts — Partner Admin access is sufficient. When a partner asks for more, the right question is what specific task requires it; the answer is usually a temporary elevation for a defined purpose, not a permanent Super Admin badge.
Partner access is for partner employees. When you hire a new internal teammate, use the standard flow: Settings → Users & Teams → Create user, enter their email, assign the appropriate permission set (not Partner Admin — they are not partner employees), and send the invite. Two practical tips from the support trenches: if the invite email doesn't arrive, have them check spam before resending, and know that an invite link can be shared directly with the new user if email delivery is the bottleneck. New teammates count against your paid seats where applicable — unlike Partner Admins.
| Mistake | Consequence | Prevention |
|---|---|---|
| Approving access to the wrong portal | Partner works in the wrong account; tools appear "locked" if that portal is on a lower tier | On the approval step, deliberately select the correct account; confirm the portal name with the partner afterward |
| Making the partner a Super Admin | Billing and account-level exposure; messy audit trail | Use the Partner Admin template; migrate existing Super Admins |
| Forgetting the Partner Seat prerequisite | Partner Admin option doesn't appear; confusion on both sides | Assign the Partner Seat first, then elevate |
| Never reviewing access after the engagement | Former partner retains working access indefinitely | Review Users & Teams at engagement end; remove or downgrade promptly |
As a HubSpot Solutions Partner, this is the exact access flow we walk every new client through at kickoff — including the multi-portal check that trips up teams with more than one account. Vantage Point's HubSpot technology consultants handle implementation, optimization, and integrations inside your portal, and our HubSpot implementation service gets new portals configured correctly from day one. Senior consultants only — no junior handoffs; the experts you meet are the experts who deliver.
We'll get access, permissions, and portal setup sorted in the first call — no day-one stall. Talk to Vantage Point about your HubSpot project.
No. Partner Admins are employees of a HubSpot Solutions Partner who work in your account under a Partner Seat, which does not consume one of your paid user seats. That is one of the main reasons to use the partner access model rather than creating a regular user account for your agency contact.
Click the access link your partner employee sends you, click Approve, and then select the HubSpot account the partner should be able to access. You need Super Admin or "Add and edit users" permissions to complete the approval. If you have access to multiple HubSpot accounts, pause at the account-selection step and pick deliberately.
Partner Admins cannot add or remove Super Admins, change billing settings, or manage sensitive data features. Day-to-day implementation work — workflows, pipelines, reports, integrations, content, and settings within those boundaries — is within their permissions.
Partner access is designed for employees of HubSpot Solutions Partners: it uses the Partner Admin permission set, requires a Partner Seat, and costs no paid seat. Adding a regular user is for your own teammates, consumes a seat where applicable, and gives you full control over their permission set. Use each for its intended purpose.
Go to Settings → Users & Teams, find the partner employee, and remove them or edit their permissions. Because partner access is tied to the individual's own HubSpot identity, revocation is a clean settings change — no shared passwords to reset, no ambiguity about who did what. Review partner access whenever an engagement ends or your partner contact changes roles.
The most common cause is that access was approved on the wrong account — for example, an older free portal instead of your current paid one, where most tools are locked by subscription tier. Confirm which portal the partner is logged into, and if needed re-run the approval selecting the correct account. A secondary check: the tools they need may genuinely be above your subscription tier.