Check why a hub team member can or cannot do something

Pick a person on the enterprise hub team and a hub permission to see whether Nova grants it, which roles or overrides decide that, and what to change.

In the sidebar, open Enterprise Hub, then Team & Access, then Access Checker. The page address is /enterprise/access-checker.

Use this when someone on the hub team says a hub page is missing or a button refuses them. It answers one question at a time: can this person do this in the hub? For a question about an organization's own pages, use the checker inside that organization (Check why someone can or cannot do something).

Before you start

• Anyone whose hub role can read the hub team can run a check.
• Only people on the hub team and hub permissions can be picked.

Steps

1. Under Select user, type the person's name or email and pick them.
2. Under Permission, use Search permissions to find the permission by name or module, and pick it.
3. Press Check access.

What you see

• The result reads Access granted or Access denied, with a reason code under it and counts of the roles, overrides and implied permissions involved.
• Roles granting lists the person's hub roles that include the permission. Empty means none of their roles grants it: give them a role that does on Team & Roles (Add a person to the hub team and set their roles), or add it to one of your own roles (Create a hub role and choose its permissions).
• Overrides shows any allow or deny set for this person. A deny always wins; clear it on User Overrides (Give one hub team member a permission their role does not have).
• Implied by lists broader permissions that carry this one with them.
• Copy explanation copies the result so you can paste it into a message.
• Clear selection under the permission lets you check another one for the same person.

If something looks different

• The page asks you to select a user and permission: both are needed before Check access works.
• The check says Access granted but the person still cannot open the page: their place on the hub team may be suspended or inactive, or your plan may not include that part of the hub.
• There is a box for optional extra context. Leave it blank; hub checks do not use it.

Open Access Checker