Nova Give one hub team member a permission their role does not have
Allow or deny a single hub permission for one person on the enterprise hub team, on top of their hub roles, and clear the exception when it is no longer needed.
In the sidebar, open Enterprise Hub, then Team & Access, then User Overrides. The page address is /enterprise/overrides.
Hub roles should do almost all of the work. An override is for the odd case: the one analyst who also needs to manage message templates, or the one admin who must not unlink organizations. It only changes what the person can do in the hub; overrides inside an organization are set there (Give one person a permission their role does not have).
Before you start
- Anyone whose hub role can read the hub team can open the page. To change overrides, your hub role needs permission to manage hub user roles.
- The person must be on the hub team (Add a person to the hub team and set their roles). If several people need the same extra access, change or create a role instead (Create a hub role and choose its permissions).
Steps
- Under Search users, type the person's name or email and pick them. Their Effective roles and a Summary of their overrides load.
- Under Overrides editor, use the search under Add override to find the permission and pick it.
- Press Allow to grant it or Deny to block it, even if one of their roles grants it. Clear selection cancels.
- Repeat for any other permissions, then press Save overrides.
What you see
- Deny wins over allow. If a person has both, the permission is blocked.
- Under Filter & view, Overrides only lists just the exceptions you have set; Show all lists every hub permission so you can set overrides in place.
- Effective permissions at the bottom is what the person ends up with once roles and overrides are combined.
- Effective roles shows role keys such as
hub_admin, the same keys you type on Team & Roles. - Clear overrides removes every exception for this person after you confirm Clear all overrides?.
If something looks different
- Nobody comes up in the search: only people on the hub team are listed.
- Save overrides and Clear overrides are greyed out: your hub role can read overrides but not change them, or no person is picked.
- The person still cannot do the thing after an allow override: their place on the hub team may be suspended, or your plan may not include that part of the hub. Run Check why a hub team member can or cannot do something to see why.