Every view and every AI answer is filtered by the requester's role.
Built-in roles
| Role | Sees |
|---|---|
| Employee | Own data only. |
| Team lead | Own team; individuals per policy. |
| Department head | Department, aggregated. |
| Admin | Everything + configuration + audit log. |
| Auditor (Enterprise) | Read-only across the workspace, no config. |
Custom roles (Enterprise)
Define scopes by team, department, metric set and individual-vs-aggregate visibility. Assign via SSO group or manually.