Skip to main content

Hubspot

Omada version badge Supported versions

This connectivity package provides support for managing users, teams, and roles in Datadog.

Supported objects and operations​

System objectsOmada Identity Data ModelOperations
UsersAccountCreate, read, update, delete
RolesResourceRead
TeamsResourceRead
Role memberships (users)Resource AssignmentCreate, read, update, delete*
Primary team memberships (users)Resource AssignmentCreate, read, update, delete*

(*) - via resource-driven attributes

Minimum required permissions​

Grant the app account the full scope within settings.users. See the HubSpot API documentation.

Implementation notes​

Role and Team assignments are attributes on the User object (resource-driven attributes are used). After importing the Role and Team objects to the Enterprise Server, use the following steps to set up resource-drive attributes:

  1. Open the RoPE configuration file:

    • On-prem: \Omada Identity Suite\Role and Policy Engine\Service\ConfigFiles
    • Cloud: In the Cloud Management Portal, navigate to Environments. In the environment row, from the drop-down menu, select Configure. Choose the RoPE configuration tab.

  2. Add the following lines under the Attribute Value Resolver extension (change the key value in case you already have that specific key defined):

<add key="HubSpotRoleId" name="HubSpot Account:C_HUBSPOTUSERROLEID" extraInfo="Type:ReferencePath" value="/#ASSIGNMENTS_PER_RESOURCETYPE/HubSpot roles:[ROLEID]" /> 
<add key="HubSpotTeamId" name="HubSpot Account:C_HUBSPOTUSERTEAMID" extraInfo="Type:ReferencePath" value="/#ASSIGNMENTS_PER_RESOURCETYPE/HubSpot teams:[ROLEID]" />
note

At the time of development, it was not possible to remove Team assignments using the API.

  • You can haveonly 1 Primary Team assigned in HubSpot. Set up a Prioritization Policy to ensure that a User only has 1 Team assignment at any given time.
  • You can have only 1 Role assigned in HubSpot. Set up a Prioritization Policy to ensure that a User only has 1 Role assignment at any given time.

Network requirements​

N/A

Prerequisites​

The HubSpot license on the account determines which objects that can be controlled. To control all objects (users, teams and roles), an Enterprise license is needed. To authenticate, use the Private App option (bearer token).