A permission switch can be locked because access comes from administrator status, the Hub's permissions mode or a group. Removing one direct permission may therefore leave access enabled through another source.

Before changing anything, check the team member, the selected product and the explanation beside the switch.

Administrator access

For an administrator, every Hub and product permission is enabled. The Hub shows Enabled because this team member is an administrator. Individual switches cannot restrict an administrator. Only an administrator can grant or remove administrator access.

Basic permissions mode

Basic mode uses fixed administrator and standard access levels. Individual Hub and product permissions cannot be customised. Advanced mode is required for direct and group permission changes.

Permissions inherited from a group

A switch marked Permission granted from group is controlled by the named group. Change it from the group's Permissions tab. Review all relevant group memberships: changing one source does not remove a permission still granted elsewhere.

Product access is separate

A product seat lets a team member open a product; permissions control their actions inside it. Group membership and permission changes do not allocate seats. Read What is the difference between permissions and seat allocations?.

Where to review permissions

Use How to review your Hub and product permissions in your profile for your own access, or How to manage product permissions for a team member when managing someone else.