Loading tutorials…
Loading tutorials…
Zoho CRM is one of the most feature-dense platforms on the market — which is exactly why most owners get it wrong on day one. Profiles and roles look similar but solve different problems, and the wrong combination leaks pipeline visibility across teams within weeks. Here is the setup sequence that holds up.
Who this is forFounders, ops leads, and Zoho One subscribers spinning up a brand-new CRM org — or anyone who created the account 6 weeks ago, never finished setup, and now has 8 users with mismatched access. If you cannot answer 'who can see whose deals,' this tutorial is for you.
What you'll need
Step 1
Time zone, fiscal year, currency, and locale are organization-wide defaults. Changing them after deals exist creates reporting headaches forever.
Open Zoho CRM → Setup (gear icon, top-right) → General → Company Details.
Set Company Name, Time Zone, Locale, and Date/Time Format. Time Zone is the one that bites later — it controls how every report rolls up days, weeks, and months across multi-region teams.
Setup → General → Fiscal Year. Pick the month your fiscal year starts. Drives every quarterly forecast. Default is January — change if your fiscal year does not match.
Setup → General → Currencies. Set the primary currency. If you sell in multiple currencies, add the others now and confirm exchange rates. Multi-currency is only available on Professional and above.
Setup → General → Business Hours. Used by SLA timers, Blueprint transitions, and workflow scheduling. Set even if you do not use SLAs yet — every team eventually does.
Step 2
Profiles control WHAT a user can do (modules, fields, actions). Roles control WHOSE data they can see (record-level hierarchy). Get this wrong and you spend years cleaning up.
Setup → Users and Control → Security Control → Profiles. Profiles are the permission template. Standard profiles: Administrator, Standard, CEO. Each grants module access (view/create/edit/delete) and feature access (mass email, mass update, import, export).
Setup → Users and Control → Security Control → Roles. Roles are the org-chart hierarchy. CEO sits at the top; reports roll up to managers; managers roll up to the CEO. A user in a lower role sees only their own records by default — their manager sees the whole subtree.
A user has ONE profile AND ONE role. Profile = "what they can do," role = "whose data they can see."
Build profiles first. Clone Standard → "Sales Rep," "Sales Manager," "Marketing Ops," "Admin (No Billing)." Walk through every module tab and tighten what each profile can edit / delete / export.
Build the role hierarchy second. Sales Rep reports to Sales Manager reports to VP Sales reports to CEO. The hierarchy determines record visibility — get it wrong and either everyone sees everything (data leak) or nobody sees anything (sales managers cannot review pipeline).
Step 3
Setup → Users and Control → Security Control → Data Sharing Settings. This is the global default that the role hierarchy modifies. Most owners never touch it and live with leaks.
Open Setup → Users and Control → Security Control → Data Sharing Settings.
Each module (Leads, Contacts, Accounts, Deals, etc.) has a default access level: Private, Public Read Only, Public Read/Write/Delete.
For most B2B sales orgs: set Leads and Deals to "Private" (only owner + their hierarchy chain sees them). Contacts and Accounts can be "Public Read Only" so reps see who else in the org owns which company.
For Activities (Calls, Meetings, Tasks): set to "Public Read Only" so managers and peers can see what is happening on shared accounts.
On top of org defaults, you can add Sharing Rules (Setup → Sharing Rules) — exceptions like "Sales team shares all Deals with Marketing ops user." Use sparingly; sharing-rule sprawl is a maintenance nightmare.
Step 4
Setup → Users and Control → Users → Add New User. Invitations expire in 7 days. Send them once profiles, roles, and sharing rules are ready, not before.
Open Setup → Users and Control → Users → "+ New User."
Fill First/Last Name, Email, and assign Profile + Role. Both are mandatory. Confirm the License (Free seats are limited; Professional/Enterprise/Ultimate licenses each cost meaningfully different amounts).
License audit: Free is 3 users max. Standard is ~$14/user/mo. Professional ~$23. Enterprise ~$40. Ultimate ~$52. On a 10-person team the difference between Standard and Enterprise is $3,100/yr — do not blindly upgrade everyone.
Send invite. User receives an email and must accept within 7 days. Stale invites do not consume a license until accepted.
After they accept, verify access matches expectations. Ask them to share their screen and walk Modules → Leads → can they see records they should not? Can they perform actions they should not (mass delete, export)?
Step 5
Setup → Channels → Email. Without organization-level email configuration, reps cannot send 1:1 sales emails from Zoho and email tracking does not work.
Open Setup → Channels → Email → Email Configuration. Pick the protocol: IMAP/POP (connects rep mailboxes), Zoho Mail (if you use Zoho Mail), Gmail / Outlook (OAuth-based).
For most teams: each rep authenticates their own Gmail / Outlook via OAuth. This is what powers SalesInbox, email tracking, and 1:1 sends — covered in detail in the "Set up Zoho email integration" tutorial.
Setup → Channels → Email → Org Email Address. Set the default From address for system notifications (deal assignments, task reminders). Use a no-reply@yourcompany.com address, not a personal mailbox.
Setup → General → Notification SMTP Server (Enterprise+). For production-grade deliverability of system emails, configure an SMTP relay (SendGrid, Postmark, Amazon SES). Zoho-default SMTP works but is rate-limited.
Authenticate your sending domain: add SPF and DKIM DNS records for the domain Zoho sends from. Without this, system notifications and 1:1 sales emails land in spam within weeks.
Step 6
Zia (Zoho AI) and the Marketplace are where the platform gets compounding value. Enable thoughtfully — every integration is data flowing in and out.
Setup → Zia. Review which Zia features your plan includes. Professional unlocks Zia Reminders, Best Time to Contact, and basic enrichment. Enterprise adds Zia Voice, lead/deal predictions, anomaly detection. Ultimate adds custom Zia models.
Most teams should enable: Lead Prediction, Deal Prediction (Enterprise+), and Best Time to Contact. Skip custom Zia models until you have 6+ months of clean closed-deal data — Zia trains on your history.
Open Marketplace (top-nav) → search for the integrations your stack actually uses today: Google Workspace / Microsoft 365 for calendar + email, your dialer (Zoho Voice / RingCentral), Slack / Microsoft Teams for notifications, your CMS, Stripe / Zoho Books for billing.
Install only what you need now. Every connected app is a permission grant and a data flow you own forever. Disconnect anything trial.
For Zoho One subscribers: most native Zoho apps (Books, Desk, Campaigns, SalesIQ, Mail) integrate with one toggle. Resist enabling all 45 at once — pick the 3-5 you will actually use this quarter.
Common mistakes
Inviting the whole team before defining profiles and roles
What goes wrong: Every rep gets the default 'Standard' profile, which includes mass delete and export rights. Within 60 days someone exports 5,000 contacts they should not have access to. You're paying $400+/mo for Professional across 10 seats and the data trust is already broken.
How to avoid: Build profiles first (Setup → Users and Control → Security Control → Profiles), build the role hierarchy second (Setup → Roles), THEN invite users. Each user gets a profile + role pair that matches their real job.
Confusing Profiles with Roles and using only one
What goes wrong: Owner assigns everyone the same profile and never builds the role hierarchy. Result: every rep sees every other rep's deals. Forecasting is meaningless because cross-team contamination is invisible. Or the inverse — owner builds roles but never tightens profiles, so reps with view-only intent end up with edit/delete rights.
How to avoid: Profile = what you can do. Role = whose data you can see. Both required. Walk every user through both lenses before inviting.
Leaving the org-wide sharing default as "Public Read/Write/Delete"
What goes wrong: Default Zoho org-wide sharing on some modules is Public. SDR1 deletes 200 of SDR2's leads without realizing. Sales manager cannot tell who owns what. Pipeline reports show massive ownership confusion.
How to avoid: Setup → Data Sharing Settings → set Leads and Deals to Private. Activities to Public Read Only. Sharing rules for narrow exceptions. Default to least-privilege.
Buying Enterprise or Ultimate licenses for everyone "just in case"
What goes wrong: You give every teammate (sales, marketing, ops, exec) an Enterprise license at $40/user/mo. That's 10 seats × $40 = $400/mo, $4,800/yr. Six months later, only 3 use Zia predictions and custom modules — the rest could be Standard licenses. You've burned $3K+/yr on unused capacity.
How to avoid: Start with mixed tiers. Sales reps actively using Zia / advanced workflows = Professional or Enterprise. Marketing ops, exec viewers, occasional users = Standard. Audit license usage quarterly via Setup → Users and Control → Users.
Skipping SPF / DKIM domain authentication
What goes wrong: System emails (deal assignment, task reminder) and 1:1 sales emails from SalesInbox start landing in spam after 2-3 weeks. Reps assume Zoho is broken and revert to native Gmail, losing logging and analytics. You're paying for Zoho but rep adoption drops to 15% after 3 months.
How to avoid: Setup → Channels → Email → authenticate sending domain via DNS records (SPF, DKIM, optionally DMARC). Takes 20 minutes and prevents months of pain.
Installing every Zoho One app on day one
What goes wrong: You enable Books, Desk, Campaigns, SalesIQ, Mail, Projects, Survey, Sign, and Forms simultaneously. Three are duplicates of tools you already use. Each writes data into CRM. By month two the contact record has 14 custom modules nobody set up intentionally.
How to avoid: Enable one Zoho app per week. Test each end-to-end before adding the next. Disable apps you do not actively use.
Recap
Done — what's next
How to set up Zoho modules and custom fields without making a mess
Read the next tutorial
Hand it off
A clean Zoho CRM setup pays compounding dividends for years. A messy one creates a Saturday-cleanup job every quarter. A vetted Zoho specialist will run the entire setup — org defaults, profile/role design, sharing rules, integrations — typically as a one-shot $300-600 engagement, or ongoing ops support at $400-1,200/mo at $14-16/hr.
See specialist rates
Standalone Zoho CRM is enough if you only need CRM. Zoho One ($37/user/mo as of 2026) bundles 45+ apps (Books, Desk, Campaigns, Mail, Projects, etc.) and is cost-effective the moment you actively use 3 or more. Most teams buying Zoho One use 5-8 apps within a year. The trap: buying Zoho One, using 2 apps, paying for 43 you do not touch. Audit your active app count quarterly.
Zoho CRM is the core CRM platform. Zoho CRM Plus is a bundle of CRM + Desk (support) + SalesIQ (chat/visitor tracking) + Campaigns (email marketing) + Social + Survey + Projects + Analytics. CRM Plus is $57/user/mo (2026). It is the right call if you are running CRM + support + marketing on Zoho but do not need the full Zoho One bundle.
Yes. Zoho CRM's Data Import tool (Setup → Data Administration → Import) handles CSV imports for Leads, Contacts, Accounts, Deals, and custom modules. For larger or more complex migrations (10,000+ records, lots of history, custom fields), Zoho offers free migration assistance for Enterprise+ plans, or use a Zoho partner. DIY migration over 5,000 records typically loses 5-15% of data quality without careful field mapping.
Free: 3 users max, basic Leads/Contacts/Accounts/Deals/Tasks, 5 custom fields per module, 1 sales pipeline, no workflow automation, no email-templates beyond 10. Standard ($14/user/mo): 100+ custom fields, workflow rules (5 per module), 25 email templates, custom dashboards, mass email. Free is genuinely usable for a solo founder testing the platform; once you need workflow automation, Standard is the floor.
A solo founder with no team can finish the org-level setup in 3-5 hours. A 5-person team with profiles, roles, sharing rules, and module customization is 2-3 days of focused work. A 20+ person org with custom modules, Blueprint, and complex permissions is a 2-3 week project — usually run by a specialist or Zoho's partner network.
Zoho CRM
Modules are the foundation of every Zoho report, workflow, and Blueprint. Get them right and your data layer is clean for years. Get them wrong — wrong field types, custom modules where a custom field would do, layouts that show every field to every user — and you spend weekends untangling. Here is the discipline.
Zoho CRM
A Zoho pipeline is the single most-referenced view in the CRM. Set up wrong, the forecast number is fiction and reps stop trusting it. Set up right, the CRO walks into Monday with a real number. Here is the discipline that holds up.
HubSpot CRM
HubSpot's Smart CRM is free, fast to spin up, and easy to break in the first month. Most owners skip the account-level defaults, invite users with the wrong permission sets, and end up rebuilding 60 days in. Here is the setup sequence that holds up.
Zoho CRM
DIY Zoho is a great idea — until it isn't. Zoho rewards specialization more than almost any other CRM because the platform is so feature-dense. This is the honest framework for when the cost of self-managing exceeds the cost of hiring help.