Multi-User & RBAC

Role-based access control for teams of any size. You decide who can use which documents, projects, and features.

Without Access Control

  • All users have the same permissions
  • No separation of sensitive data
  • No accountability for actions
  • Compliance requirements cannot be met

With RBAC

  • Granular roles and permissions
  • Data isolation between departments
  • Complete audit trail per user
  • Compliance-supporting user management

Interactive Demo

ThinkLocAI - RBAC Dashboard

Users

Resource

Permissions

AS

Anna Schmidt

Contracts

Read
Edit
Delete
Manage

Role overview:

Admin

read, write, delete, manage

Editor

read, write

Viewer

read

Transparency notice: this demo is a simulation using prepared sample data and does not show output from a live AI model. Labelled in line with Art. 50 of Regulation (EU) 2024/1689.

Features in Detail

Role Management

Define as many roles as needed with specific permission profiles.

Resource Scoping

Restrict access to specific documents, projects, or features.

User Provisioning

Automatic user creation via Azure AD, LDAP, or SCIM.

Permission Sets

Reusable permission sets for building new roles.

API-Scoped Tokens

Create API tokens with restricted permissions.

Team Hierarchies

Map organizational structures with permission inheritance.

Technical Details

Role System

  • Custom Roles
  • Permission Inheritance
  • Role Templates
  • Dynamic Assignment

Permissions

  • Read/Write/Delete
  • Admin Functions
  • Document Access
  • API Scopes

Integration

  • Azure AD Groups
  • LDAP/SCIM
  • Just-In-Time Access
  • Session Management

Use Cases

Department Separation

HR only sees HR documents, Finance only financial data. The system enforces this separation automatically.

Onboarding

New employees automatically receive the permissions for their department.

External Consultants

Temporary, restricted access for external partners on a project basis.

Map your departments to roles

We show you how to set up roles, permissions, and access for external consultants in ThinkLocAI.