HubSpot AI agent permissions
Permissions should match business risk. Give the agent the least authority needed.
Read-only
Read-only access lets the agent inspect selected records and prepare observations.
Draft
Draft permission lets the agent prepare emails, call notes, task descriptions, or summary notes without sending or saving them as final truth.
Suggest update
The agent may suggest a stage change, owner change, missing field, duplicate merge, or next task. A human approves it.
Human-approved update
For mature workflows, the agent may apply approved updates after a reviewer confirms them. Record what changed and who approved it.
Blocked actions
At the start, block automatic outreach, pricing changes, discounting, stage changes, disqualification, booking handoffs, sensitive-record updates, deletion, and prospect promises.
Use the AI Agent Permissions Checklist to define the boundary before implementation.