Skip to main content

​
Permission Inheritance

Omni respects the permissions from your source systems. You only see content you already have access to in the original application - if you can’t view a document in Google Drive, you won’t see it in Omni either.

​
How It Works

Every document indexed by Omni carries a permissions record alongside its content. The record has three fields: public, a list of authorized user emails, and a list of authorized group identifiers. Group memberships are synced from each connector and stored against your user profile. When you search, Omni:
  1. Finds matching content across all sources
  2. Filters results to documents where any of the following holds:
    • The document is marked public
    • Your email is in the document’s user list
    • Your email domain matches a group in the document’s group list
    • You belong to one of the document’s listed groups
  3. Returns only content you’re authorized to view
The same permission filter applies to the AI assistant’s search tool — it cannot retrieve or cite any document you wouldn’t see in Search.

​
FAQ

Check your permissions in the source application (Google Drive, Confluence, etc.). Omni mirrors those permissions.
Permission changes sync periodically. Contact your admin if content doesn’t appear within a few hours.
Search history is private. Admins can see aggregate usage metrics but not individual queries.