🔐
Role-based access
Everyone sees only what they should.
What is it?
Role-based access control (RBAC) means that what a person can see or do depends on their role, not on who they are. A payroll manager can open salary data. A sales rep cannot. A new joiner can see only their own profile.
How it works in NexousHub
- An admin creates roles such as Admin, HR Manager, Finance, Manager and Employee.
- Each role gets permissions per module: view, create, edit, approve or export.
- When someone joins or changes teams, you change their role once and all their access updates.
- The AI assistant follows the same rules, so it never answers with data the person cannot open.
Example
A sales manager asks the assistant, "What is everyone's salary?" The assistant declines, because the Sales Manager role has no payroll permission. The HR Manager asking the same question gets the answer.
Why it matters
- Sensitive data stays with the people who need it
- Easy onboarding and offboarding
- Fewer accidental mistakes and leaks
- Simpler to explain to auditors
More in Security
🧾
Audit trails
A record of who did what, and when.
🔒
Encryption
Your data is scrambled so outsiders cannot read it.
🪪
SSO & advanced security
One secure login, with stronger controls.
🛡️
Tenant isolation
Your company's data stays separate from everyone else's.
🤖
Responsible AI
AI that helps without overstepping.