How many Super Admins should we have in HubSpot?

Ideally, only one or two trusted individuals who are responsible for the overall portal management. For everyone else, you should create custom permission sets that align with their specific roles in sales, marketing, or service. The goal is to minimise your risk if one of these user accounts is ever compromised.

What's the biggest risk of bad HubSpot permissions?

The biggest risk is a malicious actor or disgruntled employee gaining Super Admin access. With that level of control, they could export your entire customer and prospect database, delete all your sales and marketing data, or sabotage your automations. This could cripple your business operations almost instantly.

Is this really a risk for a small business like ours?

Yes, absolutely. Attackers often view smaller businesses as softer targets because they assume security practices are less strict than at large corporations. As a recent Forbes article highlights, nefarious groups are actively targeting SMEs today. Your size does not give you immunity; it can make you a more attractive target.

That Google Warning: Are Your HubSpot Permissions a Ticking Time Bomb?