Roles and permissions

Sidekick has two roles: admin and member. Every person added to Sidekick holds one of these, and it determines what settings they can change and what they can see beyond their own work.

Admin

An admin can configure Sidekick for the whole workspace, in addition to everything a member can do.

Area	What an admin can do
People	Add, enable, disable, and manage activation for anyone on Sidekick.
Access	Configure SSO and directory sync.
Governance	Approve which models, connectors, and skills are available workspace-wide.
Budgets	Set organization and department pools, default budgets, and person-specific allocations.
Branding and Slack	Apply branding and connect Slack.
Approvals	Configure which actions require approval, and grant approvals that need admin sign-off.
Audit	Review the full record of actions taken across the workspace.

Member

A member works inside Sidekick without access to workspace-wide configuration.

Area	What a member can do
Threads	Start threads, use approved models, tools, connectors, and skills.
Approvals	Respond to approval cards in their own threads. Actions that also require administrator approval still wait for an administrator.
Rooms	Work in Rooms they belong to and continue Room threads. A Room owner manages that Room’s people, files, and Starts with instructions.
Configuration	Cannot change workspace-wide settings such as people, access, governance, budgets, branding, or Slack.

What each role sees

An admin sees workspace-wide settings, the full people list, and the audit record for the workspace. A member sees their personal threads and the Rooms they belong to; they do not see other people’s private work or workspace-wide administration.

Room ownership is separate

Workspace administrators manage Sidekick for the company. A Room owner manages that Room’s people, files, Starts with instructions, connectors, repositories, Slack connection, and threads. Room members can participate without becoming workspace administrators.

Broader workspace access

Workspace membership, product access, role, and any selected View as scope determine which Oximy products and data a person can use. Sidekick access does not automatically grant Visibility or Relay access.

Access and governance

How workspace membership, product access, role, and policies control access across Oximy.

Roll out and access

Govern

Branding and Slack

Trust and operations

Roles and permissions

Admin

Member

What each role sees

Room ownership is separate

Broader workspace access

Access and governance

​Admin

​Member

​What each role sees

​Room ownership is separate

​Broader workspace access

Access and governance

Admin

Member

What each role sees

Room ownership is separate

Broader workspace access