Knowledge Base Access Control
Similar to agent access control, knowledge bases can be restricted to specific users or groups. This ensures sensitive documents are only searchable by authorized personnel.How it works
When a knowledge base has access restrictions:- Only users in the allowed groups/users list can trigger searches against it
- Agents connected to the KB will only search it when the requesting user has access
- Documents in restricted KBs never appear in citations for unauthorized users
Setting access restrictions
The knowledge base creator and organization admins can change these settings; other users with access cannot.- Navigate to Knowledge Bases and edit the knowledge base
- Scroll to the Access Control section
- Configure visibility:
- All users — Anyone in the organization can search this KB (default)
- Specific groups — Only members of selected groups
- Specific users — Only individually selected users
- Click Save
Who can edit a knowledge base
Access to a knowledge base grants search and read rights only. Changing the knowledge base is limited by role:- KB creator and organization admins — edit KB settings (title, description, visibility, allowed users/groups), manage datasources (create, edit, delete, sync), delete any document, and delete the KB itself
- Anyone with access (except Viewers) — upload documents and delete their own uploads
- Viewers — read-only: search and browse, no changes of any kind
Interaction with agent access control
Access control is layered:- Agent access — The user must have access to the agent
- KB access — The user must have access to the knowledge base
- Agent “Company Assistant” is connected to both “General Docs” (all users) and “Finance Reports” (Finance group only)
- A user in the Engineering group can chat with the agent but only searches “General Docs”
- A user in the Finance group searches both “General Docs” and “Finance Reports”
Best practices
- Use group-based restrictions for easier management
- Match KB access to the sensitivity of the documents it contains
- Test access control by checking what citations appear for users in different groups