Multi-tenant & RBAC

SemAgent is a multi-tenant platform: each customer has their own isolated workspace (tenant). Within a tenant, you manage team members with roles (RBAC).

Tenant isolation

Each tenant's following elements are fully isolated — no other tenant can ever reach them:

• Knowledge base, sources and documents
• Agent configuration, connectors and encrypted vault
• Widget persona and conversation history
• Memory, rules and usage/billing

This isolation is the basis of the security model — see Security & GDPR.

Multiple users & roles (RBAC)

• Multiple users can be invited to a tenant.
• Per-user agent gating: you control which user can access the agent.
• Sub-users and role assignments separate permissions.
• Chat isolation: one user's conversations aren't visible to another.