Loading…
Role-based access across every workspace — per-employee permissions with read and write levels, user groups, and route-level protection.
Permissions decide what each of your people can see and change. The design goal is that access is something you grant deliberately and can read back at a glance, rather than something that accumulates until nobody is sure who can do what.
Every workspace, including anything the AI builder creates for you, is governed by the same permission system — there is no second model for custom things. Departments and positions from the organisation workspace are the vocabulary you grant in. What an employee sees in the shared company workspace is decided here; their own personal portal is scoped to them by construction.
Create an account at /setup and add your team. Start from the groups that match how your business
already thinks about roles, and grant write access only where someone genuinely changes things.
Permissions govern reach inside your own company. Separation between different companies on the platform is not a permission setting at all — it is enforced beneath this layer, so no permission mistake can expose another company's data.
If this page did not answer your question, contact the ThothOS team and quote the answer version below — it tells us exactly which wording you read.
Permissions · answer version 2026-09-02