How do permissions and access control work in Polyosync?
Permissions and access control determine which users are allowed to access specific resources and perform particular operations within Polyosync.
These controls help organizations manage their business environments while reducing unnecessary access to sensitive information.
Authentication and authorization are different.
Authentication verifies the identity of the person signing in.
Authorization determines what that authenticated person is permitted to do.
How does access control work?
Access decisions may depend on several factors:
1. The account associated with the user.
2. The organization or workspace involved.
3. The user's membership in that environment.
4. The role assigned to the user.
5. The resource being accessed.
6. The operation being requested.
7. Any additional restrictions associated with the feature.
A successful login does not automatically grant access to every resource.
What can permissions affect?
Permissions may govern activities such as:
1. Viewing business information.
2. Managing workspace members.
3. Configuring AI Employees.
4. Managing integrations.
5. Creating or modifying workflows.
6. Accessing execution history.
7. Reviewing administrative settings.
8. Performing security-related operations.
The exact permissions depend on the implemented role and feature configuration.
Why are permissions important?
Business users have different responsibilities.
An employee responsible for viewing reports may not need the ability to change integrations or manage administrative settings.
Limiting permissions helps reduce accidental changes and unnecessary exposure of business information.
Can permissions override organization boundaries?
A role should not be interpreted as authorization to access unrelated customer organizations.
Access must remain within the scope of the relevant business environment.
What happens when a user lacks permission?
The requested operation may be unavailable or rejected.
This does not necessarily indicate an account problem.
It may simply mean that the user's current role does not authorize the requested action.
What should I do if I need additional access?
Contact an authorized administrator responsible for the relevant workspace.
Explain which resource or operation you need and why it is required for your responsibilities.
Recommended practice
Use individual accounts, assign permissions according to actual responsibilities, and review access whenever business requirements change.