Editorial draft available to read. Factual and language review is pending. Examples are illustrative.
Decision and method
Define which documents, records and tools each role may use. Enforce restrictions during retrieval and execution as well as in the interface. The assistant should receive only context authorized for the current request. Include role changes and revocation so an older conversation does not preserve access that the user no longer holds.
Illustrative example
Illustrative example: a salesperson can query their portfolio while a director can view approved aggregates across departments. The sales account cannot obtain the complete dataset by asking for a summary or translation. Testing uses recognizable fictional records to detect whether information outside the authorized scope appears indirectly in an otherwise plausible answer.
Acceptance check
Test direct queries, rewording, references to links and role changes during a session. Inspect retrieved results and visible answers. Accept when allowed operations work, prohibited operations are blocked and denial does not disclose restricted details. Preserve evidence for each role and tool rather than relying on a screenshot showing that a menu item is hidden.
Key takeaways
- Permissions should constrain retrieved information and the assistant's actual tool actions.