Permissions

How SiteTrax.io decides what a person, and any assistant acting for them, is allowed to see.

The model

EverythingProject resolvessharing to one question:determines which operational projects arean sharedaccount withcan thisaccess. account.External Thatassistants singlemust rulealso governshave thevalid application, the APIauthorization and the MCPrequired server.scopes. Profile ownership and media availability apply their own controls. Connecting an assistant does not widen it,project andaccess.

nopromptcantalk past it.

Layer

What controls it Application access The SiteTrax.io account sign-inin; external assistants also require OAuth authorization with an active account and verified email Which sites and yards are visible Project sharing, managed on each project What an assistant can reach The projects shared with the account that authorized the connection What an assistant is allowed to do The OAuth scopes approved for that connection Whose profile context can be retrieved Selected facts and priorities shapefrom a responseThethe published Intelligence profile of that same accountaccount; retrieval and use depend on the assistant

Assistant scopes

Read.Read (sitetrax:read). Projects, assets, analytics, review and exceptions, video, camera healthhealth, reference information and referenceselected information.published Thisprofile context. It also covers ordinarylisting operationalyour questionsalerts and isdigests and reading their delivery history. These operations are read-only. Notifications write.write (sitetrax:notifications:write). Creating,Creating listinga anddetection alert, creating a scheduled email digest, or cancelling alerts,one andof creatingyour recurringnotifications. digests.These Thisactions isrequire read access plus this additional permission. A client may request it during the onlyinitial scopeconnection thator changeslater. anything, and it is approved separately.

Grant the write scope only where the workflow needs it. Integrations that expose SiteTrax.io through a read-Read-only surfaceintegrations, including the Microsoft 365 federated connector, do not receive it. See Account Access and OAuth for client-specific authorization and Alerts and Scheduled Digests for supported notification workflows.

Media

Images and video can be withheld independently of the record. Project configuration, retention, user permissions and redaction settings all affect availability, and a redacted record can return permitted operational metadata while withholding the media.

Profiles are personal

An Intelligence profile belongs to one user account. It is not an organization setting, it is not inherited, and one person answers do not shape another person results. Each person completes their own interview.

Administrationinterview infor thea currentpersonalized applicationportal isexperience. scopedPublishing to individual projects. This account did not expose an organization-wide roles console, so role-level administrationit is not documentedrequired here.for Ifordinary yourMCP organizationaccess. usesAn one,assistant can retrieve selected published facts and priorities, but the public profile tool does not return the saved working brief, custom instructions or response-style preferences. Projects selected in a profile provide context; current project sharing determines access, including later sharing changes.

Project access is managed on each project. These instructions cover project sharing; contact SiteTrax.io sofor thishelp pagewith canany beadditional extended.administration arrangements used by your organization.