> ## Documentation Index
> Fetch the complete documentation index at: https://docs.getomni.co/llms.txt
> Use this file to discover all available pages before exploring further.

# Access Control

> Understanding what you can see in Omni

## Permission Inheritance

Omni respects the permissions from your source systems. You only see content you already have access to in the original application - if you can't view a document in Google Drive, you won't see it in Omni either.

## How It Works

Every document indexed by Omni carries a permissions record alongside its content. The record has three fields: `public`, a list of authorized user emails, and a list of authorized group identifiers. Group memberships are synced from each connector and stored against your user profile.

When you search, Omni:

1. Finds matching content across all sources
2. Filters results to documents where **any** of the following holds:
   * The document is marked public
   * Your email is in the document's user list
   * Your email domain matches a group in the document's group list
   * You belong to one of the document's listed groups
3. Returns only content you're authorized to view

The same permission filter applies to the AI assistant's search tool — it cannot retrieve or cite any document you wouldn't see in Search.

## FAQ

<AccordionGroup>
  <Accordion title="Why can't I see a document I know exists?">
    Check your permissions in the source application (Google Drive, Confluence, etc.). Omni mirrors those permissions.
  </Accordion>

  <Accordion title="I just got access to a shared drive. When will it appear?">
    Permission changes sync periodically. Contact your admin if content doesn't appear within a few hours.
  </Accordion>

  <Accordion title="Can admins see my searches?">
    Search history is private. Admins can see aggregate usage metrics but not individual queries.
  </Accordion>
</AccordionGroup>