Product controls you can use when setting up your team, identity provider and connected tools.
Access that follows responsibility.
Roles and granular permissions determine which product areas a member can access and which actions they can take. Authoring, publishing, reporting and workspace administration can be assigned separately.
Workspace roles and permissions
Separate management and publishing rights
Agent groups for ownership and routing
A defined workspace boundary.
Helpdash binds requests to a tenant context and checks the workspace associated with the authenticated user. Customer portal access and operator access use separate authentication guards.
Tenant-scoped application data
Workspace context enforcement
Separate customer and operator authentication
The right way into the workspace.
Two-factor authentication adds another step to operator sign-in. SAML single sign-on and SCIM provisioning support connected identity management where configured.
Two-factor authentication and recovery codes
SAML single sign-on
SCIM user provisioning
Connections with limits of their own.
MCP connector scopes narrow an integration’s access to the permissions of its owner. Static tokens can have an expiry and IP allowlist; tokens can be disabled from the AI connectors settings.
Read and per-module write scopes
Owner permissions remain the access ceiling
Static token expiry, revocation and IP allowlists
Connected AI assistants
Permission to connect is only the start.
An external assistant’s MCP access must pass the same workspace and permission checks as the operator it represents.
The authenticated connection is bound to its tenant context.
2
Check the granted scope.
Read access and module write scopes define what the connector may request.
3
Check the owner’s permissions.
A connector cannot use a scope to exceed its operator’s rights.
4
Record the interaction.
MCP authentication and tool calls produce audit entries for traceability.
The details deserve a conversation.
Identity requirements, deployment questions, data handling and procurement checks can vary by team. Share what you need to review and we can work through the specifics.
A useful place to begin is your role structure, identity provider and integration inventory. We can help map those requirements to your Helpdash setup.