How One uses permissions in Factorial
One is designed to work strictly within the permissions already configured in Factorial.
Important: One does not bypass permissions, elevate access, or infer restricted information.
That means One will never show information or perform actions that you are not allowed to access manually.
If you don’t have access to certain data or actions in Factorial, One won’t have access either.
How permissions work with One
One uses the same permission system defined in Factorial:
- User roles
- Custom permissions
- Team, entity, and scope restrictions
When you ask One a question or request an action, it first checks:
- Who you are
- What permissions you have
- What data or actions you’re allowed to access
Only then will One respond, and only within those limits.
What One will never do
One will never:
- Share sensitive data you don’t have access to
- Reveal information about employees outside your scope
- Execute actions you’re not permitted to perform
- Combine or infer restricted data indirectly
Learn more about permissions here.