Understand access and permissions

Your access determines which workspaces, resources, and actions are available to you. A role provides a starting set of permissions; your organization’s configuration and the selected scope also matter.

Check access before starting

1. Confirm the workspace shown in the header.
2. Open the page needed for your task.
3. If a control is missing or disabled, read any explanation displayed and ask your workspace administrator whether your role allows it.

Being able to view a resource does not necessarily allow you to edit, approve, activate, or export it. A workspace selection does not grant new permissions.

Request the access you need

For the knowledge assistant, use Request access to act when it is offered. For other resources, follow your organization’s access-request process or contact your workspace administrator. Include the workspace, resource, and task you need to perform.

An administrator should grant the access needed for the task in the correct scope. Do not share accounts or credentials to work around a restriction.

For customer administrators

Follow Manage workspace access to add directory identities, inspect effective access and change role overrides in a delegated workspace. Changes can apply immediately; review their scope before acting. Identity-provider provisioning and group mappings may require a platform administrator or your organization’s identity team. A workspace administrator cannot necessarily change those settings.

After an access change, ask the user to sign in again when their identity-provider session needs refreshing, select the expected workspace, and confirm the specific action is available.

If your session expires

Use the Your session expired dialog to sign in again. Review the page and explicitly retry the intended action; failed changes are not automatically replayed. If a save may already have completed, check the resource before creating it again.

Next

Select a workspace, troubleshoot an access problem, or consult the technical identity reference for identity-provider configuration.