GRND-Tenant admin
Sandbox tenantConsole

Organization settings

Enterprise admins manage access and policy. They cannot view conversations or identify contributors.

Members provisioned

—

Requires SSO

Roles

4

tenant_admin · exec_analyst · employee · vendor_support

Data region

Not set

Configuration required

Privacy controls

Can only be raised above 10. Database constraint enforces k ≥ 10.

Intended policy only — automated deletion is not yet implemented.

Access boundaries

  • View released aggregates (exec_analyst)
  • Manage policy & integrations (tenant_admin)
  • View raw or private employee conversations — any role
  • Map a contribution to an employee — any role
  • Bulk export raw signals to buyer
  • Vendor support access to tenant content

Vendor operations (GRND-0 staff) are separate from enterprise admin and have no content access.

Integrations

  • SSO (SAML / OIDC)

    Verifies eligibility only. Your IdP may log access.

    Configuration required

  • Slack launch portal

    Launch-only. No message content, no history scopes.

    Not connected

  • Microsoft Teams launch portal

    Launch-only. No message content.

    Not connected

  • HRIS cohort sync

    Department/location for cohort sizing only.

    Not connected

  • Voice transcription

    Server-side, no client keys.

    Configuration required

Audit log Synthetic demo data

  • exec_analystAsked aggregate questionbudget 19/20
  • tenant_adminRaised cohort threshold10 → 12
  • exec_analystLaunched mission (simulation)scope: Operations
  • systemSuppressed cohortFinance — Treasury (n<k)