It never has more access than you
Who is in a space, how much AI may change, and which links and connections widen access. You set each one where you can see it.
Who is in a space
A space's members decide who can enter. There are three roles: owner, administrator and member.
- Subspaces inherit
A subspace inherits its parent's access. Remove someone from the subspace alone and they can still reach it through the parent.
- No access, no trace
Someone who can't see a space sees no list and no preview, and nothing hints that it holds files.
- Letting someone see one file
Add them as a member, share the file with them by name, or send a share link.
How much AI may change
Choose a level under Settings, then General settings, then Xiaoji's permissions.
- Read only
Reads and answers, and changes nothing.
- Edit within a space
Creates and edits files in the spaces where you can write.
- Full access
The widest level, for work you trust.
At every level AI has no more access than you do. When it can't read a space, it says so instead of working around the limit.
People decide
When a person needs to decide, the request goes to the designated reviewer. The decision is recorded under their name. Neither colleagues nor Xiaoji can decide for them.
What widens access
Each one says who it reaches, and asks you first.
- Adding a member
That person, in this space and the spaces below it.
- Sharing a file
The colleagues you pick, for that file only.
- A share link
Signed-in colleagues, or whoever the link allows, until it expires.
- A connection
AI, as you, reading inside Feishu, DingTalk or WeCom.
Share links
A share link lets a colleague read one file without joining the space. It is read-only, it expires, and you can cancel it at any time.
- Who can open it
Signed-in colleagues at your company.
- Expiry
30 days by default, or never.
- Downloading the original
Off by default, and you can turn it on.
- Version
Pinned to the current version by default, or always the latest.
The other person sees only the file name, who shared it, when, and the file itself, and nothing else in the workbench. You can see how often each link was opened and by whom, and Revoke ends it at once.
Everything can be looked back on
Conversations and file changes leave records. Review or restore earlier document and web page versions. Approval decisions are recorded under the reviewer’s name.
Hosting within your organization
The website, sign-in, spaces, files and conversations can run on servers your organization manages. External model and connector calls still send relevant content to the selected providers. Confirm data scope and network configuration when setting up your deployment.
Bring one real task from your team.
Book a demo