Hi there! I’m working with a team that currently uses Azure Files as their system of record, with all content stored in a single file share. They’re planning to build a company-wide RAG chatbot using Weaviate as the vector database.
One key concern is access control: each file in the share has specific permissions defining who can view it. Does Weaviate have a way to incorporate or respect those permissions at query time when employees interact with the chatbot (in a Premium or Flex plan)?
For example, beyond department-level access, there may be differences within the same team—such as varying seniority levels—where one employee should have access to more information than another. Can Weaviate handle this kind of fine-grained access control during context retrieval, or would this require additional custom configuration to align search results with file-level permissions?
Apologies if I’m not framing this clearly—I’m happy to clarify further if needed!
hi @darren1212 !!
Welcome to our community ![]()
It looks like you are looking for Object Level RBAC. While we do not have an ETA yet, this is a popular request and we are currently scoping it for our roadmap
So for now we will need to find other “creative” ways to accomplish that. ![]()
Let me know if this helps!