Direct grants
Access → Direct grants shows every known right and who holds it. The page is view only: you grant and revoke rights on the role or group page.
The overview
Section titled “The overview”| Column | Content |
|---|---|
| Right | Label and technical name, for example Access the admin area (access:admin) |
| Kind | System or Extension: … with the extension’s name |
| Explanation | What the right allows |
| Who has it | Roles, groups or Everyone; nobody if nobody holds it yet. Occasionally individual people appear here too (Person …), see below |
Search right searches the technical name and the extension’s ID, such as manage:roles or translate, not the label. An expanded row shows the right’s Class, whether ADMIN has it automatically applies, and whether it is Set at start.
Where rights are granted
Section titled “Where rights are granted”| Kind | Granted to | Where |
|---|---|---|
| System (admin rights) | Roles only | Role → companyGPT tab → section Admin rights in LibreChat |
| Extension | Roles, groups or everyone | Role or group → Extensions tab; for everyone under Configuration → Extensions |
No rights are granted to individual people. If a person should get a right, give them a role with that right (role → Members) or add them to a group with that right.
If Who has it still shows an individual person, the right comes from an older version or was set directly in CompanyGPT. companyADMIN cannot revoke such a right. In that case contact innFactory.
System rights
Section titled “System rights”The system rights control the administration area. The ADMIN role receives them automatically at every CompanyGPT start. A “manage” right includes the matching “view” right.
| Right | Technical name | Allows |
|---|---|---|
| Access the admin area | access:admin | Opens the administration area |
| View users / Manage users | read:users / manage:users | View the user list and user details, or edit users |
| View roles / Manage roles | read:roles / manage:roles | View roles and their rights, or create roles and change their rights |
| View groups / Manage groups | read:groups / manage:groups | View groups and members, or create and change groups and maintain members |
| View configuration / Manage configuration | read:configs / manage:configs | View or change configuration and adjustments |
| Assign configuration profiles | assign:configs | Assign adjustments to roles, groups or people |
| View agents / Manage agents | read:agents / manage:agents | View every agent, or edit and share every agent |
| View prompts / Manage prompts | read:prompts / manage:prompts | View every prompt, or edit and share every prompt |
| View skills / Manage skills | read:skills / manage:skills | View every skill, or edit and share every skill |
| View shared links / Manage shared links | read:sharedlinks / manage:sharedlinks | View or manage shared links |
| View assistants / Manage assistants | read:assistants / manage:assistants | Reserved, currently without effect |
| Manage MCP servers | manage:mcpservers | Manage MCP servers |
| View usage | read:usage | View usage data |
| View audit log | read:audit_log | View and export the logs |
| View insights | read:insights | An older way into Insights; for new access grant the extension right View Insights |
| Manage code environments | manage:code_environments | Manage the deployment’s code environments |
The rights for the extensions, such as Use translation or View Insights, are described in Extensions.