A person with the user role sees nothing until they are granted modules. Grants are per person and per tenant, and they are the only thing standing between an account and your data.
1What can be granted
| Grant | Opens |
|---|---|
dashboard.<key> | One dashboard. Seventeen keys in total: six for leadership, eleven operational. |
ask_anything | The question box. On its own it answers nothing — see below. |
admin.audit | The activity and audit views, including other people's question history. |
2How a grant reaches a question
This is the part worth understanding properly, because it is the difference between NeelAI and a chat window pointed at your database. A dashboard grant does not only unlock a page. It also tells the question box which parts of the database that person is allowed an answer from.
So a credit controller granted ask_anything plus dashboard.customer_aging and dashboard.collections can ask anything they like about receivables and will get it. Ask the same account “what was our net profit last year” and it does not answer, is not evasive about why, and says the figure is outside what they have been given.
3A worked example
A mid-sized manufacturer with twenty NeelAI accounts, set up in about ten minutes:
| Who | Grants | Result |
|---|---|---|
| Managing director | All seventeen dashboards, ask_anything | Everything. |
| Credit controller | customer_aging, collections, ask_anything | Receivables in full; no margins, no payroll, no P&L. |
| Purchase head | purchase_analysis, vendor_payments, inventory_valuation, ask_anything | Buying and stock; not what the goods were sold for. |
| Plant manager | production, stock_movement, delivery_performance | Dashboards only, no free questions. |
| Auditor (temporary) | compliance_risk, admin.audit | The Statutory Checks and who asked what. No commercial figures. |
4Granting well
Grant the dashboards a person's job needs and let the question box follow from them. The common mistake is the opposite: granting ask_anything broadly on the grounds that it is “just questions”, which is exactly backwards — a free-text question reaches further than any single dashboard.
admin.audit lets its holder read other people's question history. That is appropriate for a compliance officer and rarely appropriate for a department head. Grant it on purpose, not as part of a bundle.5When somebody says they cannot see something
Nine times in ten it is a missing grant rather than a fault, and the application will tell you which one: the message names the dashboard or the data it would have needed. Compare that against the person's row in Administer → Users before looking any further.