Permissions
What a connected AI assistant is allowed to see and change.
What an assistant can do depends on how it connected.
Sign-in connections
A sign-in connection acts as the user who approved it, and uses that user's role permissions, the same as when they use Imploy in a browser.
- There is no access for suppliers, archived staff, or roles without app access.
- Owners follow their role too. Being the owner only adds owner-only abilities.
- Each area is either no access, view, or view and edit, based on the role's permissions. For example, read-only client access lets the assistant view clients; full client access also lets it make changes.
Access token connections
An access token connection uses the token's permission areas and whether AI assistant access is turned on for the token. It acts as the organisation owner, but only within the areas the token allows.
The permission areas are Clients, Staff, Roster, Forms, Reports, Tasks, Incidents and Prospects. Each can be disabled, read, or read and write.
An access token acts as the organisation owner. Give it only the permissions you intend, and turn on AI assistant access only for assistants you trust.
Finance
Finance tools are read only. A sign-in connection can also use the tools that change billing only when the user's role has full finance access.