Roles and Permissions

Explains the different roles a user can be assigned to and their permissions on the platform

Platform Features

The following roles are managed on Unique’s IDP and include access and permissions for platform features. However, permissions and access to content/spaces are not part of this overview but specified in the Spaces concept (Spaces documentation will follow soon).

Zitadel Key	Zitadel Display name	Zitadel Group	Unique Capabilities	Capabilities and functionalities
chat.chat.basic	chat with limit to input	chat	Chatting interface w/ potential limit to the chat input	Access to chatting interface Default settings for end user to chat with the application
chat.knowledge.read	view knowledge base	knowledge-base	View central knowledge base	View (incl. download) central knowledge base
chat.knowledge.write	upload knowledge base	knowledge-base	Upload central knowledge centre	Allowed to upload files into knowledge centre
chat.feedback.read	read chat-feedback	admin	Can see all User Feedback	Read and export user feedback (i.e. export CSV) Read and export analytics (see Analytics) Upload and download benchmarking (see Benchmarking )
chat.admin.all	configure assistant	admin	Has access to many APIs for performing configurations. But has no access to APIs getting actual data like messages or documents.	Allows configuration and access via API This is an admin role that should only be granted to a few selected users.
chat.debug.read	debugging	admin	Can see debugging infos	Debugging (view jsons and chunks with access to knowledge)
admin.user-management.write	Manage groups for users	admin	Can see user management section	Add and remove users to groups
admin.space.write	Configure spaces	admin	Can see space management section and the AI module templates section	Configure spaces (e.g. add, update, remove space)
admin.app-repository.write	Manage app repository	admin	Can see apps management section	Create apps for SDK and integrations Create endpoints where Webhook events are being sent to Create API Keys that allow full system access via APIs Review RequestLogs of Webhooks sent by our system

Additional roles that are not listed on this page but are shown in the Unique IDP can be ignored.

Content and Spaces

Access to content and spaces is fully managed on the Unique platform and outside of the IDP. As a Space Manger with the role admin.space.write you can decide which user groups have access to which space. Only the user groups assigned to a space can view the space (Spaces documentation will follow soon).

Author	Jovana Sanussi