Best Practices for Deactivating HubSpot Users

When a team member leaves your organization, failing to properly deactivate their HubSpot access can create confusion for your team, security risks for your data, and a disjointed experience for your prospects. This article outlines best practices for deactivating users in HubSpot — including how to transfer ownership, safeguard system integrity, and maintain enrollment continuity.

Before Departure

Planning ahead is the key to minimizing disruption. As soon as you learn someone is leaving, take proactive steps to limit risks and ensure a smooth transition. The actions below help safeguard sensitive data and prepare owned assets for reassignment — before access needs to be removed entirely.

1. Begin to restrict access incrementally. While most will leave an organization in good standing, it's critical to maintain the security and integrity of your system and database. Therefore it is a good idea to begin limiting access to only the items that are essential for completing tasks. Please see this knowledge base article for instructions. 
2. At a minimum, restrict their ability to delete or export any contact, deal, application or company records, or any other custom object records. 
3. Consider re-assigning any owned assets such as records, meeting links, templates or sequences so that if a prospect responds, there will be no need to re-assign things later.
4. Modify any automated assignment rules for new contacts, leads, tasks or other records so that the departing user does not continue to accrue ownership of new records.

After Departure or When Access is No Longer Needed

Once the employee has left or no longer requires system access, your priority should shift to reassigning assets and preserving CRM continuity. The steps below ensure clean handoffs and protect data integrity without losing historical context.

1. Bulk reassign all assets that remain assigned to the user by navigating to Settings > Users and Teams, clicking on the user's name, and then scrolling down to the Review user's records and assets section.
2. Manually reassign any assets that cannot be bulk reassigned.
3. Delete the user's main meeting link as they cannot be reassigned. 
4. Deactivate the user. This is different than fully deleting the user, which is not recommended as it terminates some helpful history and prevents you from ever re-activating the user's accounts should they ever return to the organization. Deactivation immediately terminates their access. 
5. If the person is in admissions, student affairs, or some other role that requires 1:1 engagement with prospects, students, their families or other stakeholders, it may be wise to reach out for any contacts that were mid-engagement with the departing user. You might send them a message like:
   
   

   "Hello {First Name},

   I wanted to inform you that my colleague, {Colleague's Name}, is transitioning to a new role, and I will now be your primary point of contact moving forward. I have reviewed all prior conversations and am excited to assist you on your journey. If you would like to arrange a meeting, please feel free to schedule a time that works for you using this link: meeting link."

Tips to Make This Process Easier

• Use HubSpot Owner personalization tokens: Avoid hardcoding in names, phone numbers and meeting links in emails. Instead, use ownership tokens so that if a record is reassigned, any communications that had previously used the former employee's name will dynamically be updated to the name of the newly assigned user. 
• Only Grant Necessary Permissions from Day 1: The lower a person's permission set is to begin with, the less there will be to untangle should they depart your organization. This is a good security practice to follow either way. A good rule of thumb is to only grant permissions that are truly needed. 

Deactivating users in HubSpot isn’t just an operational task — it’s a key part of protecting your enrollment experience. By following these best practices, your team can preserve continuity, maintain trust with prospects, and keep your CRM clean and secure for the next user who picks up the conversation.