An access profile defines what a group of people can query through the AI. Create one profile per area (Finance, Operations, Sales…) and assign it to people in Users.
Three rules always apply:
- A new profile starts with no tables.
- A person without a profile sees no data.
- When in doubt, Rowgate closes access: if a person is missing a value used in a rule, they don’t see any rows from that table.
Create a profile
- In Access profiles, click New profile.
- Give it a name and, optionally, a description of who uses the profile.
- Click Create profile. The profile screen opens so you can choose what it can see.
To start from a similar profile, open it and use Duplicate. The copy keeps the same tables, columns and rules, but not the people.
Allow tables
In the Tables section, check the subjects the profile can query. The list shows only the tables exposed in Data sources, grouped by source and schema, with search and the Allow all and Remove all buttons.
Each allowed table shows a summary: Full access, or how many hidden columns and rules it has.
Hide columns
In the Columns section, choose the table and click the columns the profile can’t see. Names that look sensitive (CPF, salary, email…) get a Sensitive? flag to help with your review.
The AI doesn’t receive the contents of a hidden column, and it can’t filter or sort by it either. A question that tries to use the column is refused, so nobody can infer the value with questions like “who earns more than 10k?”.
Limit rows with rules
In the Rows section, rules limit which records each person can see. Each rule is a sentence:
In table, show only records where column condition value.
The value can be:
- text: a fixed value, the same for everyone in the profile. E.g. in
ordens_servico, show only records wherestatusis not equal tocancelada. - the person’s value: a value for each person, filled in under Users. E.g. in
ordens_servico, show only records whereregiaoequals the person’sregiaovalue.
Available conditions: is equal to, is not equal to, contains, starts with, ends with and, for the person’s value only, is in (the person can have several values, such as several portfolios). “Contains”, “starts with” and “ends with” ignore case; “is equal to” is case-sensitive.
Rules apply to every query, on top of any filters the AI asks for. The AI can only narrow the result, never widen it. A table with no rules shows every record to anyone with the profile.
Warning: an incomplete rule (no column or no value) closes the whole table. The screen warns you before saving.
View as this profile
The View as this profile panel simulates access before you save. Choose a person and a table: the preview applies the current draft to up to 8 real rows from the database and shows how many records that person would see, with hidden columns already left out.
If the person is missing a value used in a rule, the preview shows that they wouldn’t see any rows and points out what needs to be filled in under Users.
Save, discard and remove
Changes stay as a draft until you click Save changes. Discard goes back to what was saved. The profile is read again on every question, so whatever you save applies to the AI’s next query.
Remove profile leaves the people in that profile without a profile: they stop seeing any data until they’re given another one. The screen shows how many people will be affected before you confirm.