Skip to main content

Overview

This page lists every permission available when building a hub role — the roles that control what hub users can do inside the Partner Hub. Use it to look up what an individual permission does and what granting it allows. It’s a companion to Users & Roles, which explains how the hub’s role system works. Read that page first for the concepts; come here to look up a specific permission.
Hub roles are separate from company-level roles. Abilities granted by a hub role are automatically scoped to the resellers a user is linked to — a hub user who can view companies only sees companies belonging to their resellers.
When you build a company role or a global reseller role from the hub, the available permissions are the company-level set, not the hub permissions on this page. Those are documented in the core platform Permissions Reference.

How to Read This Reference

Permissions are organised into groups by the type of data they apply to (Companies, Users, Plans, and so on). For each group you choose which actions to allow and which records they apply to.

Standard Actions

Which Records a Permission Applies To

You can only grant abilities you hold yourself, so a hub user cannot build a role more powerful than their own.

Reseller & Company Management

These groups control the core partner operations — managing resellers and the companies beneath them.
Companies → Access signs a hub user into a company’s admin area with full access for that company. It’s how partners support and configure companies directly, but it grants broad reach into that company’s data — restrict it to staff who need it.

Hub Users & Roles

Users → Access lets a hub user impersonate another hub user. It’s useful for troubleshooting and verifying a role is configured correctly, but it grants that user the other account’s view of the hub — restrict it to administrators.

Billing & Plans

Monitoring & Integrations

Reporting

Super Users

The super user role bypasses every permission on this page — a super user has unrestricted access to every reseller, company, and feature in the hub. Assigning it triggers a confirmation prompt, and it can only be added by editing an existing user (not during creation). See Super Users.