Organisations, roles and permissions

The organisation is the boundary
Everything in Primefold RI (documents, portfolios, chats, extracted data) belongs to exactly one organisation. Members of one organisation cannot see another organisation's data; the isolation is enforced in the database itself, not only in the interface.

A person can belong to more than one organisation, an advisor working with two clients, for example, and switches between them from the top of the sidebar. The two workspaces stay completely separate.

Tabelle 

There is no read-only viewer role today, and roles are not scoped to particular properties or portfolios. Everyone in the organisation sees the organisation's documents.

Tips & best practices
Connecting a company SharePoint or Drive is an Admin action on purpose: it decides what the whole organisation can see. Everything a person does with the documents afterwards is a Member action.
Procurement questionnaires regularly ask for a viewer or auditor role. There is not one. Log the request rather than promising it.