> ## Documentation Index
> Fetch the complete documentation index at: https://help.dingtalk.io/llms.txt
> Use this file to discover all available pages before exploring further.

# Advanced Permissions FAQ

> A: Effective permissions are the combination of doc permissions and Advanced Permissions.

<AccordionGroup>
  <Accordion title="When both doc permissions and AI Table Advanced Permissions are on, which one wins?">
    A collaborator's effective permissions are the combination of **doc permissions** and **Advanced Permissions**.

    When a member has both, the system first unions the **scopes** of the roles they're in under Advanced Permissions, then intersects that with their **doc permissions** to produce the effective permissions.

    In general, **doc permissions** set the **upper bound** of what a collaborator can do; **Advanced Permissions** narrow the data scope and operations from there.
  </Accordion>

  <Accordion title="Who can turn Advanced Permissions on/off and configure default and custom roles?">
    Any collaborator with the **Manage** permission can enable, modify, or disable Advanced Permissions — including collaborators who inherit Manage from a knowledge base or knowledge group.
  </Accordion>

  <Accordion title="Will turning on Advanced Permissions affect existing collaborators?">
    Yes. Once it's on, effective permissions become the combination of **doc permissions** and **Advanced Permissions**. By default, only Admins and members assigned to a custom role can access the AI Table — existing Editors and Viewers temporarily lose access until they're assigned a role. If you switch to "all role members can access", collaborators who aren't assigned to any custom role will get the default role's permissions intersected with their doc permissions.
  </Accordion>

  <Accordion title="Will turning off Advanced Permissions affect existing collaborators?">
    Yes. Once it's off, all collaborators revert to access and collaboration via **doc permissions** alone — the original Editor and Viewer permissions take effect again.
  </Accordion>

  <Accordion title="How many roles can I define under Advanced Permissions?">
    Free can define 3 roles per AI Table; Business can define 50 per AI Table; Enterprise can define 100 per AI Table.
  </Accordion>

  <Accordion title="Why don't I see Advanced Permissions on a doc I'm visiting?">
    You're not the AI Table's Owner or Admin. Only collaborators with the **Manage** permission can see and configure Advanced Permissions.
  </Accordion>

  <Accordion title="Can I set Advanced Permissions on an AI Table embedded inside a doc?">
    Not yet.
  </Accordion>

  <Accordion title="After turning on Advanced Permissions, why do the preview thumbnails go blank?">
    With Advanced Permissions on, AI Table no longer generates content-bearing preview thumbnails.
  </Accordion>

  <Accordion title="When configuring per-record Advanced Permissions, how do filters work? Is there a filter cap?">
    Single-select, multi-select, person, and Created by fields can be used as filters today. Multiple filters are supported, up to 50 per rule.
  </Accordion>
</AccordionGroup>