Permissions inherited from every connected source.
Goplustive does not invent a new access model. If a person cannot open a Drive folder or a Slack channel today, an answer will not include content from it tomorrow.
Refunds over ₹10,000 require manager sign-off and are processed within 5 business days. 12
One line worth memorising.
For every answer, Goplustive checks that the person asking has permission to see each source used to build that answer - as if they had opened it themselves in the native app.
- Answers are user-scoped at query time
- No shadow permissions or bypass roles
- Excluded sources never enter the index
- Audit log records every source used per answer
- Step 01Identify the asker
Query is bound to the user's SSO identity in your identity provider.
- Step 02Enumerate candidate sources
Only sources this user could open in the native app are considered.
- Step 03Filter and cite
The answer is built from filtered sources - and each citation confirms access at the time of query.
- Step 04Deny with dignity
If nothing accessible answers the question, the answer explains that clearly rather than leaking a hint of what exists.
Simple roles that match how teams actually work.
Some sources should never be searched.
Legal privilege, HR investigations, payroll, board material - these belong on a short list of excluded sources. Excluded sources are never indexed and cannot be re-enabled without a workspace admin action, logged with a reason.
- Slack#legal-privileged Excluded
- Drive/HR - Investigations Excluded
- WikiSpace: Board briefings Excluded
- CRMField: Payroll notes Excluded
Access, mirrored - not re-invented.
If your team already runs on SSO and per-source permissions, Goplustive respects them by default.