Skip to content
SiteSage Docs

Role-Based Access Control (RBAC)

SiteSage uses a Scope-Based RBAC. The AI’s intelligence and data access are dictated by the API key used during the request. This allows you to serve different “versions” of the AI to different users using the same component.

How it Works:

Section titled “How it Works:”

When your proxy forwards a request to SiteSage, it attaches an API key. SiteSage validates the Scopes tied to that key:

  • Admin Key (scope: performance_metrics): The AI can access agent logs, response times, and system health. Great for internal dashboards.
  • User Key (scope: user_context): The AI is restricted to reading only the data related to the specific user_id provided.
  • Public Key (scope: public_faq): The AI only has access to your public knowledge base.

Key Concept: The component doesn’t decide what the AI knows; your Proxy does by choosing which key to use based on your app’s existing login state.

Reach out to us for more information on how to use RBAC in your app with different scopes.