Skip to content

Sharing & Permissions

BotBoss lets you share your work with the people, teams, and agents you collaborate with — while keeping every organization's data fully isolated. You decide exactly what to share, who can see or change it, and you can take that access back at any time. Every share is permissioned, revocable, and audited.

What you can do

You can share the things you create and own, including:

  • Files and folders — sharing a folder cascades to what's inside it.
  • Data tables, databases, and saved views — open up the data your team needs.
  • Dashboards — share live, read-only views of your metrics.
  • Skills — reuse and distribute the playbooks you've built.
  • Artifacts — share generated documents, charts, and other outputs.
  • Agents — let teammates see and message an agent, or manage it.
  • Saved task and work-item views — share the lenses you've set up for tracking work.

For each share, choose a recipient and an access level:

  • People — any member of your organization.
  • Teams — share with a whole group at once; access follows membership as people join or leave.
  • Agents — your AI agents are permissioned just like people, so they only act on what they've been given.

Pick read (view and use) or write (edit) access. Some surfaces — like dashboards and saved views — are read-only for recipients by design. You can revoke any share at any time, and access is cut immediately.

For dashboards, you can mint an unlisted link so people outside your organization can view it read-only. External links always carry an expiry (and can be revoked early). Dashboards built on sensitive data require you to explicitly acknowledge before an external link can be created.

How permissions work

The core rule is simple: you can only share what you can already access. Sharing never grants more than you hold — it widens access within your own bounds, never beyond them.

  • To share a resource, you need write access to it.
  • Recipients only get the level you grant — read or write — never more.
  • Agents are permissioned the same way; when an agent proposes a share, a person confirms it first.

Example. You build a "Q3 Revenue" dashboard. You share it read-only with the Finance team so everyone sees it live, and grant your analyst write access to keep it updated. Later the analyst changes teams — you revoke their access in one click and they immediately lose it, while Finance keeps its read-only view.