Roles and permissions (RBAC)

Every view and every AI answer is filtered by the requester's role.

Built-in roles

RoleSees
EmployeeOwn data only.
Team leadOwn team; individuals per policy.
Department headDepartment, aggregated.
AdminEverything + configuration + audit log.
Auditor (Enterprise)Read-only across the workspace, no config.

Custom roles (Enterprise)

Define scopes by team, department, metric set and individual-vs-aggregate visibility. Assign via SSO group or manually.

Did you find this article useful?