Visibility
Visibility is an enforced access policy. A prompt cannot make a public agent private.
Member access
Role permissions apply on top of workspace membership.
MCFull access
Maya Chen
Owner
DOCan publish
Daniel Okafor
Admin
PREdit drafts
Priya Raman
Builder
DRChat access
Devon Ruiz
Support agent
LFReports & chat
Lena Fischer
Analyst
Permission matrix
Backend policy — the UI hides unavailable actions, but enforcement happens server-side.
| Capability | Owner | Admin | Builder | Support | Analyst | Viewer |
|---|---|---|---|---|---|---|
| View agent configuration | ||||||
| Test in playground | ||||||
| Edit draft & sources | ||||||
| Publish a version | ||||||
| Manage channels & access | ||||||
| View conversation analytics |
Permitted knowledge
Restricted sources stay invisible to this agent unless explicitly granted.
Support answer corrections
Reviewed Q&A · 87 entries
Internal SOP library
36 documents · refresh overdue by 6 days
Permitted datasets
Revenue by team
Billing replica
Delayed orders
Orders replica
MRR movement
Billing replica
Fleet utilization
AIO fleet API
Access changes take effect on the next published version.
Isolation checks
Workspace ID is resolved server-side, never trusted from the browser.
Retrieval filters tenant and source permissions before search.
Public sessions cannot call internal datasets, even if the bot is present in a public channel.
Revoked members lose access immediately on the next request.
Access summary
VisibilityInternal
Members12 can use · 3 can edit
Publishers2
Restricted sources1 granted
Datasets2 of 4