Platform
Permission model
Tamanor separates platform capability (what an account's OAuth grant truly allows) from workspace roles (what a team member is allowed to do), and offers an action only when both permit it.
Two layers of permission
Platform permission is the truth of what the connected account can do — read comments, hide a comment, read reviews — derived from the OAuth grant and the platform's API. Workspace permission is what a team member's role allows inside Tamanor.
An action is only offered when the platform supports it AND the user's role allows it. Missing platform permissions are surfaced honestly as a reconnect/re-grant prompt.
Frequently asked questions
- What happens if a permission is revoked on the platform?
- Tamanor detects the revoked permission on its next check and surfaces a reconnect prompt instead of failing silently.