Configure Semantic Permissions
Choose Grantees and Permissions
Open Platform Management → Semantic Data Permissions → Ontology Permissions and select the user, role, or user group to authorize. These recipients are called grantees.
Choose a permission tab based on the work the recipient needs to do:
| Work to Perform | Permission Tab |
|---|---|
| Create, view, or edit ontology definitions | Ontology Definition Permissions |
| Edit ontology basic information, publish, or delete ontologies | Management and Publication Permissions |
| Add, modify, or delete object records and their attribute values | Property Value Modification Permissions |
| View original attribute values | Property Value Viewing Permissions |
Configure the first three permission types through Add Authorization Rule in the corresponding tab: select target resources, then set the permissions to grant. Column-level permission rules control restrictions on viewing attribute values, as described in the next section.
Ontology definitions, publication, and business data are authorized separately. For example, granting a member only ontology publication permission does not allow them to modify object data. Grant the corresponding Property Value Modification Permissions for data changes.
Property Value Viewing Permissions
Property Value Viewing Permissions is a read-only tab showing the column-level rules that restrict the current grantee. Review matching enabled rules and their scope: all grantees, specified grantees only, or all grantees except specified exclusions.
To add, edit, enable, or disable rules, follow the page's link to Column-Level Permission Management. Editing a rule that applies to all grantees affects others too. Check its scope before making changes.
When multiple rules match the same attribute, priority determines the effective result. View it in the attribute's rule tooltip.
Modify Object Data through Chat
Members need the corresponding Property Value Modification Permissions to add, modify, or delete object data through chat. Viewing original attribute values is also subject to Property Value Viewing Permissions.