Sharing in Canopy
Use Sharing in Canopy to decide who can use which agents, models, and resources. Set rules, check effective access by resource, and trace why a user has access.
Overview
Section titled “Overview”Sharing is where you decide who in your organization can use which agents, models, and resources. It is the single place to grant access, see what someone can actually use, and understand why.
Open Sharing from the left navigation in Canopy.
The three tabs
Section titled “The three tabs”| Tab | What it answers |
|---|---|
| Who can use what | The rules - grant or remove access for users and groups to specific resources |
| By resource | The effective result - for a given agent, model, or resource, who can use it |
| Why can… | The trace - for a specific user and resource, the rule that grants or blocks access |
Prerequisites
Section titled “Prerequisites”- Access to Canopy with an administrator role.
- The agents, models, or resources you want to share already exist in your organization.
Grant access with a rule
Section titled “Grant access with a rule”Step 1: Open Who can use what
Section titled “Step 1: Open Who can use what”Select Sharing, then the Who can use what tab. This lists the rules currently in effect.
Step 2: Add a rule
Section titled “Step 2: Add a rule”Add a rule that grants a user or group access to a resource, such as an agent or a model. Save it; the rule takes effect for the people it names.
Check effective access
Section titled “Check effective access”Open the By resource tab and select an agent, model, or resource to see exactly who can use it after all rules are applied. Use this to confirm a change did what you expected.
Trace a decision
Section titled “Trace a decision”Open the Why can… tab, pick a user and a resource, and Canopy shows the rule that grants or blocks access. Use this when someone reports they cannot use something they expect to, or can use something they should not.
Frequently Asked Questions
Section titled “Frequently Asked Questions”What happened to Access Rules? Access Rules is now Sharing. The link redirects automatically, and the rules you set previously carry over.
What can I share? Agents, models, and other resources your organization makes available. The exact list depends on what is configured for your tenant.
A user cannot use an agent they should have. How do I find out why? Open the Why can… tab, select the user and the agent, and Canopy shows the deciding rule so you can correct it.
Related
Section titled “Related”- Platform Admin - manage the models, MCP, and skills that Sharing governs
- Managing User Permissions - roles and app permissions per user
- Canopy Overview - the admin portal at a glance
- Sign In As and Delegate Login - access a child customer’s apps