Who can see what
Your chats, files, agents, and personal connections are private by default. Being a workspace admin does not add access to them.
In TulipFarm, most of your work is private to you until you share it. Membership in a workspace alone does not open another member’s personal chats, sources, agents, skills, connections, or files.
Private by default
Section titled “Private by default”These items are visible only to you:
- Personal chats. The Chats list says “Only you can see these chats.”
- Your files in My files, until you share them.
- Files that you add to your Knowledge. Your chats and agents can search them. Other people can’t.
- Your agent tasks in My agent tasks.
- Your personal memory under Account.
Admin is not a master key
Section titled “Admin is not a master key”A workspace has two roles, Admin and Member. Admins manage membership, workspace settings, models, and table access.
Being a workspace admin does not add access. An admin can’t open your personal chats, agents, files, or connections because of the Admin role.
On the Usage page, admins see workspace totals. Members see the usage of their own chats and agents.
Personal connections
Section titled “Personal connections”A connection to a personal account is visible only to you.
| Connection | Who sees it |
|---|---|
| Gmail | Only you. Admins can’t see it. |
| Google Drive, Sheets, Docs, and Slides | Only you |
| GitHub | Only you in this workspace. Admins can’t view or use it. |
| Slack | Selected people and teams. Connection managers control sharing. |
| GitHub team | Selected people and teams |
| Jira, Confluence, and Trello | Your account, or a shared business account |
Projects
Section titled “Projects”A project is a shared space for a team’s chats, files, and instructions.
- Only project members can open a project.
- Project members can read the chats in the project.
- Files that you add to a project are visible to everyone in that project.
A team is a group of members. Admins share access to tables, agents, and connections once per team.
- Table access grants add up across teams. There are no deny rules.
- A row permission applies to all rows in the table.
- Table access does not share files.
Agents
Section titled “Agents”An agent’s Access tab lists each person and team that it is shared with. Each person or team gets one of four permissions.
| Permission | What it allows |
|---|---|
| Read | See the agent |
| Invoke | Start tasks with the agent |
| Edit | Change the agent’s instructions |
| Manage | Change access, execution, and activation |
Sources and citations
Section titled “Sources and citations”When an answer cites a source, TulipFarm checks your access again each time you open the citation. If your access ended, you see a message that the source changed, was removed, or your access ended.