Clearances

Clearances are essential identifiers such as HR or ACCOUNTING, attributed to both Users and Synths, controlling access to all resources within your SynthGrid.

Clearances are security labels from Lattice-based Access Control.

Users, Synths, Memories and Knowledge Sources all have clearance levels associated with them.

%%{init: {'flowchart': {'defaultRenderer': 'elk'}}}%%
flowchart LR
    %% Users
    Alice((Alice
HR + FINANCE))
    Bob((Bob
SALES + IT))
    Carol((Carol
EXEC + HR +
FINANCE + SALES))

    %% Synths
    HRS[HR Synth]
    FINS[Finance Synth]
    SALES[Sales Synth]
    ITS[IT Synth]
    EXECS[Executive Synth]

    %% Memories
    HRM[HR Memories & Tools]
    FINM[Finance Memories & Data]
    SALESM[Sales Memories & Tools]
    ITM[IT Memories & Systems]
    EXECM[Executive Memories & Data]

    %% Alice's visible connections
    Alice --"`HR`"--> HRS
    Alice --"`FINANCE`"--> FINS
    HRS --"`HR`"--> HRM
    FINS --"`FINANCE`"--> FINM

    %% Bob's visible connections
    Bob --"`SALES`"--> SALES
    Bob --"`IT`"--> ITS
    SALES --"`SALES`"--> SALESM
    ITS --"`IT`"--> ITM

    %% Carol's expanded connections
    Carol =="FINANCE"==> FINS
    Carol =="EXEC"==> EXECS
    Carol =="HR"==> HRS
    EXECS --"EXEC"--> EXECM
    Carol =="SALES"==> SALES

    style Alice fill:#f9f,stroke:#333
    style Bob fill:#bbf,stroke:#333
    style Carol fill:#fcf,stroke:#333
    
    style HRS fill:#f9f,stroke:#333
    style FINS fill:#f9f,stroke:#333
    style SALES fill:#bbf,stroke:#333
    style ITS fill:#bbf,stroke:#333
    style EXECS fill:#fcf,stroke:#333

Table of Access Requirements

For a User or Synth to access something in your SynthGrid, they must have clearances according to the table.

How to acquire clearances

Clearances are centrally assigned by System Administrators.

You can ask your system administrator to create, update, change or edit clearance levels at any time. Clearance levels allow for your SynthGrid to accurately reflect the knowledge boundaries within your organization, restricting this to specific users and Synths within specific roles.