Access Control (RBAC)

Hummingbird AI enforces role-based access across chat history, pipeline creation, and analysis data.

Chat History

Users see only their own history by default. Additional access is role-based. Unauthorized attempts are automatically blocked.

Ownership

Each chat is owned by its creator. Ownership cannot be transferred. Retention timelines are policy-driven and visible in the UI.

Pipeline Creation

Restricted to Admin and Power User roles — covers UI prompts, VS Code extension, and all creation modes.

Analysis Access

Pipeline, task, and dashboard analysis follows the same role-based permissions as the underlying data.