Roles and permissions

Aithon has two roles inside an organization, and one designation on top of them. Roles are set when a member is invited and can be changed later by an admin; a change takes effect the next time the person signs in, and Aithon signs them out to make that happen.

User

Every member, whatever their role, can do the everyday work:

1. Connect their own sources (Gmail, Outlook, Google Calendar and Meet, LinkedIn, WhatsApp) and disconnect them.
2. Work their accounts: browse All Accounts, add accounts to My Accounts, open deals and leads, generate insights, run outreach with their own mailboxes.
3. Ask Aithon, set a personal email signature, choose their own notification preferences.
4. Create a private research list of accounts, and request an account that is not yet in All Accounts.
5. See the organization's AI-assistant apps (the server URL and client IDs) and connect their own Claude or ChatGPT.

Admin

An admin can do everything a user can, plus manage the organization:

1. Invite and remove members, change roles, cancel pending invitations, set the reporting structure.
2. Edit the organization profile (name and logo) and organization-wide settings, including per-user product scoping and the postal address used in unsubscribe footers.
3. Set the privacy controls that decide which data categories the AI may use, and the Do-Not-Contact list.
4. Build and enable account lists, configure what All Accounts contains, assign accounts and territories to sellers, and approve sellers' account requests.
5. Create and delete the AI-assistant apps that let Claude or ChatGPT connect.
6. View Team Usage, the organization's adoption analytics.
7. Submit AWS fund requests and change Marketplace listings and offers, always.
8. Connect and disconnect Attio, which is restricted to admins.

Organization-wide connections such as Salesforce, HubSpot, Slack and Gong are best made by whoever administers the source.

AWS Partner Admin

A designation, not a role. An admin can mark any member as AWS Partner Admin from the Members list, which lets that person submit AWS fund requests and manage Marketplace listings and private offers. Admins keep those rights whether or not they are designated.

Safeguards

An organization can never lock itself out: the last admin cannot be removed, and nobody can remove themselves. When a member is removed, their access ends immediately.