Skip to content
Request a demoGet a demo
All integrations
HubSpot

HubSpot security: audit portal users, agencies, and offboarding.

Connect HubSpot to Elba to inventory portal users, uncover external marketing agencies or departed reps with lingering CRM access, run User Access Reviews, and remove revoked accounts.

Request a demo See the workflow

HubSpot OAuth API · Portal user inventory, Access Reviews & Removal

Capabilities

What this integration covers.

01

See every HubSpot portal user.

Import HubSpot user accounts and reconcile them against your employee directory without reading CRM contact lists.

02

Uncover forgotten agency logins.

Spot external marketing agencies, freelancers, and former GTM staff who still hold active HubSpot portal access.

03

Automate reviews and seat removal.

Run scheduled HubSpot Access Reviews with marketing and ops owners, remove rejected users, and export PDF/CSV evidence.

Example workflow

Remove stale agency and ex-employee access from HubSpot.

How the integration supports a specific security task.

  1. 01

    Sync HubSpot portal

    Elba synchronizes HubSpot portal users and flags external domains and departed employees.

  2. 02

    Review external & stale users

    Marketing or RevOps owners confirm which seats remain authorized.

  3. Remove & export

    Elba deprovisions eligible revoked HubSpot users and records audit-ready PDF/CSV proof.

Related capability

Explore this part of the platform.

Explore apps & access

Before you connect

Coverage, permissions, and requirements.

Connects via HubSpot OAuth API to synchronize portal users and execute supported user removal. Elba does not read HubSpot CRM contacts, deals, or marketing emails.

Explore security & privacy
Does Elba access HubSpot contacts, deals, or marketing lists?

No. Elba connects strictly to HubSpot’s user-account endpoints to inventory seats, run User Access Reviews, and remove revoked users.

Can Elba automatically remove revoked HubSpot users after an Access Review?

Yes. HubSpot is a verified remediation-enabled source in Elba, allowing administrators to deprovision eligible accounts directly from a completed User Access Review or offboarding workflow.

Why connect HubSpot if our team signs in with Google or Microsoft?

HubSpot portals frequently allow direct invites to external agencies and contractors outside SSO, and disabling an IdP account does not automatically remove the user record from HubSpot without provisioning.

Coverage and requirements
  • Covers HubSpot portal user inventory and supported user removal; Super Admin accounts or primary portal owners may require role changes in HubSpot prior to removal.
  • This integration covers user/seat inventory, identity-gap detection, User Access Reviews, and supported account deprovisioning; it does not perform file DLP or OAuth scope revocation inside HubSpot.
  • Account removal applies only to eligible non-owner accounts supported by the provider API or SCIM endpoint.

Other applications

Review more integrations.

All integrations

Salesforce

Audit Salesforce CRM licenses, catch departed reps, and deactivate revoked accounts.

Google Workspace

Directory sync, third-party app grants, and Drive sharing permissions.

Slack

Employee messages and reminders, with separate public-channel protection.

Discuss your requirements

Evaluate Elba for HubSpot.

Review the available capabilities, required permissions, and setup for your environment with our team.

Request a demo