How can we help?

Workspace membership and user roles are important components of access control. They help determine which people are authorized to enter a business environment and what operations they may perform. These controls serve different purposes. What is workspace membership? Workspace membership establishes a user's relationship with a particular business environment. A person should not gain access to an unrelated workspace merely because they have a valid Polyosync account. What is a user role? A role represents a set of responsibilities and permissions. Polyosync Enterprise includes role options such as Member, Manager, AI Admin, Security Admin, Admin, and Viewer. The exact permissions associated with each role depend on the implemented authorization rules. Does a higher role bypass workspace isolation? A privileged role should not be interpreted as permission to access unrelated customer organizations. Administrative authority must be evaluated within its applicable scope. Can users belong to more than one business environment? The availability of multiple memberships depends on the supported account structure. Where multiple memberships are supported, permissions should be evaluated separately for the relevant environments. Can an employee invite another person to a workspace? Invitation capabilities depend on the permissions assigned to the user. An invitation should not be treated as valid authorization unless the appropriate account and workspace requirements are satisfied. How should administrators manage access? Step 1: Identify the employee's responsibilities. Step 2: Determine the appropriate workspace. Step 3: Select the relevant role. Step 4: Complete the supported invitation or membership process. Step 5: Verify that the user can access the required functionality. Step 6: Review whether any permissions are unnecessary. Step 7: Update access when responsibilities change. Step 8: Revoke access when the business relationship ends. What is least-privilege access? Least privilege means granting only the permissions reasonably required for a person's responsibilities. It helps reduce accidental exposure and the potential impact of compromised accounts. What if a user can access an unexpected workspace? The organization should review the user's memberships and assigned roles. If the access appears unauthorized, report the issue promptly. Recommended practice Use individual accounts, carefully managed memberships, and role assignments that reflect real operational responsibilities.