Workspace · Permissions

Governance that's obvious.

Mirror roles, gate high-risk actions, and log every AI answer and export, without slowing legal or finance work.

RBAC mirroring Step-up approvals Lineage & audit
Xybern Permission Matrix Dashboard

Workspace Scope

Global policies, residency, and AI integrations

Project Control

Per-team permissions and approvals for projects

Source Gates

Mirror access for the assistant — no broad copies

Attested Outputs

Exports with approver trails and model context

Team
Manage workspace collaborators, roles, and administrative access invites.
Team management interface
Overview
Dashboard overview of obligations, project pulse, and compliance trends.
Obligations dashboard overview
Tracking
Granular tracking and end-to-end lineage for every verified obligation.
Obligation tracking and lineage

Where Permissions Apply

Clear scopes for assistants, projects, threads, and sources.

Workspace Controls

  • Policies, residency, and default roles
  • Integration scopes for models and tools
  • Global export, attestation, and audit

Least-privilege by default

No broad ingestion. Access mirrors your existing systems and roles.

Approvals with context

Approver, scope, and rationale recorded for all sensitive actions.

Attested outputs

Briefs & exports carry signatures and per-thread policy snapshots.

What Changes

Faster approvals. Verified exports. Clearer controls.

Before
  • Broad data copies to shared drives for "experimentation"
  • Manual approvals lost in email and chat threads
  • No audit trail for prompts, reasoning, or exports
After
  • Mirrored, read-scoped access with full logging
  • Step-up approvals for sensitive actions
  • Attested, cited outputs with full lineage
Asset Manager
−48% approval time
Day-one AI workspaces via step-up flows
Banking Group
0 incidents
90 days post go-live on AI projects
Legal Ops
+3x throughput
Governance-ready briefs for review

Who can do what?

Filter access by role or action. Hover for details.

Action Owner Admin Editor Viewer
Create project Allow Allow
Invite member Allow Allow
Run tools / AI reasoning Allow Allow Allow
Attach sources Allow Allow Allow
Approve redlines / exports Allow Allow Request
Export briefs Allow Allow Allow View-only
Set residency Allow Allow Request
Allow Full access Request Needs approver View-only Export only Not permitted

Live governance on your data.

Run a guided evaluation on your workloads. Measure approval time saved and audit completeness.