Who can do what with Minds

Minds access is set on roles. Use this page to choose the presets or single permissions a role needs, and to check what each one lets its users do with chats, Minds, training cards, artifacts and scheduled tasks.

Give a role Minds access

1. Click Admin in the sidebar, choose Profile Management, then Roles, and open the role you want to change.
2. In the role panel, click Permissions under Access.
3. Open the Minds tab.
4. Click a preset under High-Level Permissions or Standard Permissions, or single permissions under Granular Permissions. A preset turns on every permission it bundles.
5. Click Save changes.

For the full steps, see Roles and permissions.

Presets

Presets bundle permissions. Minds Administrator includes every standard preset.

The standard presets are:

What single permissions unlock

Minds

• View Minds lets you see the Minds list and open a Mind. It is needed for the Minds page.
• Add Mind lets you create a Mind. The Add Mind button appears only with it, and with Add Mind alone a user cannot open the Minds list.
• Edit Mind lets you save changes to a Mind. The Duplicate button appears when you may edit Minds and one is selected. Edit Mind is also needed for the Benchmarks tab, and with Edit Mind alone a user cannot delete a Mind.
• Duplicate Mind lets you copy a Mind. Without it, the copy is refused even though the Duplicate button shows.
• Delete Mind lets you delete a Mind. The Delete action appears only with it.

Training Cards

• View Training Cards, Add Training Cards, Edit Training Cards, Enable/Disable Training Cards and Remove Training Cards work with the cards of a Mind.
• Editing a card needs Edit Training Cards or Enable/Disable Training Cards. Reordering needs Edit Training Cards, and removing cards needs Remove Training Cards.
• Draft Training Cards with Mind lets the Mind save drafts from chat, as described under Training Cards Drafter.

Chats and artifacts

• View Chat/Message, Add Chat/Message, Rename Chat and Delete Chat work with your own chats.
• View Artifacts, Add Artifacts and Delete Artifacts work with your own artifacts.
• View Others Chat/Message, Add Message In Others Chat, Rename Others Chat and Delete Others Chat work with other users' chats.
• View Others Artifacts and Delete Others Artifacts work with other users' artifacts.
• Create Private Chat lets you create private chats. Only the creator of a chat can change its visibility.
• Share Chat lets you share a chat you can see with another user, read-only and for a limited time.

Tasks

• View Tasks shows the Scheduled Tasks page.
• Add Task lets you create a scheduled task.
• Edit Task lets you change a task. Only its creator can edit it, even an administrator.
• Execute Task lets you run a task now. You can run your own tasks, and an administrator can run any task.
• Delete Task lets you delete a task. You can delete your own tasks, and an administrator can delete any task.

A scheduled run uses the creator's permissions. See Scheduled Tasks.

Which Minds a role can reach

View Minds is the first step, but it is not enough on its own. Administrators and users in a Mind's owner role can always open it.

• The roles listed in a Mind's Permission Groups can also open and manage it. Everyone else has to be brought in through one of these.
• A new Mind starts unpublished. While it is unpublished, only its owner role and administrators can reach it; once it is published, the roles in its Permission Groups reach it as well.
• Warehouse Builder Minds are for the Admin role only. Nobody else can see, create, edit, duplicate or delete them, whatever their permissions.
• Lake Builder Minds need View Lake Objects to see. To create, edit, duplicate or delete one, you also need Add/Modify Lake Objects, unless you are an admin.

See Warehouse Builder and Lake Builder for the builder kinds, and Who can do what in the Lake for the Lake permissions.

What a Mind runs as

A Mind's query identity sets whose data its SQL reads. Under Owner Role, the SQL runs with the owner role's data. Under Execute as User, it runs as you, with the first of these roles you hold: the owner role, the Permission Groups in their listed order, then the Admin role.

• When none of those roles applies, the query is refused with "No executable role is available for this mind."
• Every builder Mind runs as the person who messages it, so it can change only what you may change.
• A Mind set to Execute as User, and every builder Mind, cannot run SQL while you view DataMind OS as another user: "SQL execution is disabled while impersonating another user; exit the view to run queries". A Mind on Owner Role keeps answering in that session. See Impersonate a user.

What users can see in chats

• A private chat is visible only to its creator. Role permissions do not open it, and administrators cannot read it either; only a share from the creator opens it to someone else. See Chat commands, shortcuts and privacy.
• A share covers one chat, read-only and time-limited. The person cannot write in it or share it onward, and the share never opens the Mind or your other chats. See Share and copy a chat.
• While you view DataMind OS as another user, private chats stay hidden, including that user's own, and the shares they received do not open.
• Chat permissions control what users can open and change; a user without any of them can still start a new conversation of their own.

Limits

A user with View Training Cards but without Edit Mind sees only the Training Hub tab of a Mind. Settings, AI Config, Sources and Benchmarks stay hidden.

Related permissions outside Minds

• Bypass PII Detection lets you send a message past a PII warning. Without it, a flagged message cannot be sent. Each bypass is recorded in the PII detection log. See PII detection.
• View Lake Objects and Add/Modify Lake Objects control access to Lake Builder Minds, as described above. See Who can do what in the Lake.

For the full list of permissions in each category, see Permission reference. To learn how roles, permission tiers and table access combine, see How access works.

Questions, answered

What is the smallest set of permissions to chat with a Mind?

Use Minds is enough on the permissions side, because it includes View Minds and your own chat and artifact rights. The user must also reach the Mind, for example by being in its owner role. See Create a Mind.

How do I let someone manage training cards but not Mind settings?

Give the user Training Cards Manager and View Minds, but not Edit Mind. The user then opens each Mind on the Training Hub tab only. Without View Minds, the list of Minds is refused. See Train a Mind with training cards.

Can a support person read other people's chats?

Yes, with View Others Chats, which also lets them read other users' artifacts. It does not let them read private chats: a private chat is visible only to its creator. See Chat commands, shortcuts and privacy.

What does Training Cards Drafter allow?

The Mind can save training cards from that user's chats as disabled drafts for review. The permission on its own does not let the user view, edit or enable training cards.

Which permission shows the Scheduled Tasks page?

View Tasks, which comes with the Tasks Viewer preset. To add, edit, run or delete tasks, the user also needs Add Task, Edit Task, Execute Task or Delete Task. See Scheduled Tasks.

Who can delete another user's artifacts?

Users with Delete Others Artifacts. To delete their own artifacts, users need Delete Artifacts.

Why does the duplicate action appear when the copy fails?

The action shows for users with Edit Mind, but the copy is refused unless the user also has Duplicate Mind. Duplicate Mind comes with Minds Manager. See Edit and duplicate a Mind.

Why can't another role open a Mind I just created?

A new Mind starts unpublished, so only its owner role and administrators can reach it at first. Once it is published, the roles in its Permission Groups reach it as well.

Does sharing a chat give the person access to the Mind?

No. A share covers that one chat and is read-only. The Mind, its tabs and your other chats stay closed to the person; they need their own access to the Mind to chat with it. See Share and copy a chat.