---
key: check-what-a-hub-member-can-access
title: Check why a hub team member can or cannot do something
audience: staff
section: enterprise
routes: ["/enterprise/access-checker"]
permissions: ["hub.users.read"]
features: ["hub.users"]
since: 0.0.1
updated: 0.0.1
status: published
summary: Pick a person on the enterprise hub team and a hub permission to see whether Nova grants it, which roles or overrides decide that, and what to change.
keywords: [hub access denied, why can't they see, hub permission check, troubleshoot hub access, effective permission, access checker]
related: [create-a-hub-role, give-a-hub-member-a-permission-override, add-a-person-to-your-hub-team, check-what-a-user-can-access]
---

In the sidebar, open **Enterprise Hub**, then **Team & Access**, then **Access Checker**. The page address is `/enterprise/access-checker`.

Use this when someone on the hub team says a hub page is missing or a button refuses them. It answers one question at a time: can this person do this in the hub? For a question about an organization's own pages, use the checker inside that organization ([[check-what-a-user-can-access]]).

## Before you start

- Anyone whose hub role can read the hub team can run a check.
- Only people on the hub team and hub permissions can be picked.

## Steps

1. Under **Select user**, type the person's name or email and pick them.
2. Under **Permission**, use **Search permissions** to find the permission by name or module, and pick it.
3. Press **Check access**.

## What you see

- The result reads **Access granted** or **Access denied**, with a reason code under it and counts of the roles, overrides and implied permissions involved.
- **Roles granting** lists the person's hub roles that include the permission. Empty means none of their roles grants it: give them a role that does on **Team & Roles** ([[add-a-person-to-your-hub-team]]), or add it to one of your own roles ([[create-a-hub-role]]).
- **Overrides** shows any allow or deny set for this person. A deny always wins; clear it on **User Overrides** ([[give-a-hub-member-a-permission-override]]).
- **Implied by** lists broader permissions that carry this one with them.
- **Copy explanation** copies the result so you can paste it into a message.
- **Clear selection** under the permission lets you check another one for the same person.

## If something looks different

- The page asks you to select a user and permission: both are needed before **Check access** works.
- The check says **Access granted** but the person still cannot open the page: their place on the hub team may be suspended or inactive, or your plan may not include that part of the hub.
- There is a box for optional extra context. Leave it blank; hub checks do not use it.

[[route:/enterprise/access-checker|Open Access Checker]]