Access
Controlling who in your organization can see or do what.
Access in Auron works at two levels. A user's role governs what kind of thing they can do across the organization, and per-record grants govern which specific records they can see. The two are checked together, not interchangeably.
Role-based access
Every action, creating a conversation, updating a record, viewing analytics, is checked against the calling user's role. This is enforced identically regardless of which surface the request came from: the console, the mobile app, or a connected client like Auron in Claude.
Record-level access
Beyond role, individual records can be granted to specific users or teams, which is what lets two people with the same role see different subsets of records. This answers both directions of the question: what can this person see, and who can currently see this record.
Where this is managed
Assigning roles and granting record access both live in the console under Access.