# Chat (/docs/reference/roles-permissions/chat)



Chat permissions are baseline tenant-member capabilities. Personal session ownership and tenant context still apply. A permission to send a message does not grant access to someone else's history, private files, Agents or external MCP credentials.

## Permissions [#permissions]

This family contains **7 permissions**. “Baseline member” means every current tenant member already has the operation permission, including members with any system role. It does not bypass the resource checks described above. “Custom role” means the identifier can be selected when defining a custom role.

<Catalogue>
  <details className="catalogue-entry">
    <summary>
      ### chat.message.create [#chatmessagecreate]

      <span className="catalogue-description">
        Send a message or initiate a supported AI response.
      </span>
    </summary>

    <div className="catalogue-content">
      Send a message or initiate a supported AI response. Model, Agent, tool and attached-content access are checked separately.

      | Property    | Value                                                                                        |
      | ----------- | -------------------------------------------------------------------------------------------- |
      | Scope       | Selected tenant                                                                              |
      | Granted by  | [Baseline member](/docs/reference/roles-permissions/system-roles#baseline-tenant-membership) |
      | Custom role | Yes                                                                                          |
    </div>
  </details>

  <details className="catalogue-entry">
    <summary>
      ### chat.message.list [#chatmessagelist]

      <span className="catalogue-description">
        Read messages in a chat session accessible to the caller.
      </span>
    </summary>

    <div className="catalogue-content">
      Read messages in a chat session accessible to the caller.

      | Property    | Value                                                                                        |
      | ----------- | -------------------------------------------------------------------------------------------- |
      | Scope       | Selected tenant                                                                              |
      | Granted by  | [Baseline member](/docs/reference/roles-permissions/system-roles#baseline-tenant-membership) |
      | Custom role | Yes                                                                                          |
    </div>
  </details>

  <details className="catalogue-entry">
    <summary>
      ### chat.session.create [#chatsessioncreate]

      <span className="catalogue-description">
        Start a chat session in the selected tenant.
      </span>
    </summary>

    <div className="catalogue-content">
      Start a chat session in the selected tenant.

      | Property     | Value                                                                                                                                                    |
      | ------------ | -------------------------------------------------------------------------------------------------------------------------------------------------------- |
      | Scope        | Selected tenant                                                                                                                                          |
      | Granted by   | [Baseline member](/docs/reference/roles-permissions/system-roles#baseline-tenant-membership)                                                             |
      | Custom role  | Yes                                                                                                                                                      |
      | Also implies | [chat.session.list](/docs/reference/roles-permissions/chat#chatsessionlist), [chat.session.read](/docs/reference/roles-permissions/chat#chatsessionread) |
    </div>
  </details>

  <details className="catalogue-entry">
    <summary>
      ### chat.session.delete [#chatsessiondelete]

      <span className="catalogue-description">
        Delete a chat session owned by the caller.
      </span>
    </summary>

    <div className="catalogue-content">
      Delete a chat session owned by the caller.

      | Property     | Value                                                                                                                                                                                                                                     |
      | ------------ | ----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
      | Scope        | Selected tenant                                                                                                                                                                                                                           |
      | Granted by   | [Baseline member](/docs/reference/roles-permissions/system-roles#baseline-tenant-membership)                                                                                                                                              |
      | Custom role  | Yes                                                                                                                                                                                                                                       |
      | Also implies | [chat.session.list](/docs/reference/roles-permissions/chat#chatsessionlist), [chat.session.read](/docs/reference/roles-permissions/chat#chatsessionread), [chat.session.update](/docs/reference/roles-permissions/chat#chatsessionupdate) |
    </div>
  </details>

  <details className="catalogue-entry">
    <summary>
      ### chat.session.list [#chatsessionlist]

      <span className="catalogue-description">
        List the caller's chat sessions.
      </span>
    </summary>

    <div className="catalogue-content">
      List the caller's chat sessions.

      | Property     | Value                                                                                        |
      | ------------ | -------------------------------------------------------------------------------------------- |
      | Scope        | Selected tenant                                                                              |
      | Granted by   | [Baseline member](/docs/reference/roles-permissions/system-roles#baseline-tenant-membership) |
      | Custom role  | Yes                                                                                          |
      | Also implies | [chat.session.read](/docs/reference/roles-permissions/chat#chatsessionread)                  |
    </div>
  </details>

  <details className="catalogue-entry">
    <summary>
      ### chat.session.read [#chatsessionread]

      <span className="catalogue-description">
        Read one of the caller's chat sessions.
      </span>
    </summary>

    <div className="catalogue-content">
      Read one of the caller's chat sessions.

      | Property    | Value                                                                                        |
      | ----------- | -------------------------------------------------------------------------------------------- |
      | Scope       | Selected tenant                                                                              |
      | Granted by  | [Baseline member](/docs/reference/roles-permissions/system-roles#baseline-tenant-membership) |
      | Custom role | Yes                                                                                          |
    </div>
  </details>

  <details className="catalogue-entry">
    <summary>
      ### chat.session.update [#chatsessionupdate]

      <span className="catalogue-description">
        Change a chat session owned by the caller, such as its title or settings.
      </span>
    </summary>

    <div className="catalogue-content">
      Change a chat session owned by the caller, such as its title or settings.

      | Property     | Value                                                                                                                                                    |
      | ------------ | -------------------------------------------------------------------------------------------------------------------------------------------------------- |
      | Scope        | Selected tenant                                                                                                                                          |
      | Granted by   | [Baseline member](/docs/reference/roles-permissions/system-roles#baseline-tenant-membership)                                                             |
      | Custom role  | Yes                                                                                                                                                      |
      | Also implies | [chat.session.list](/docs/reference/roles-permissions/chat#chatsessionlist), [chat.session.read](/docs/reference/roles-permissions/chat#chatsessionread) |
    </div>
  </details>
</Catalogue>

## Related pages [#related-pages]

* [Roles and permissions catalogue](/docs/reference/roles-permissions)
* [System roles and baseline access](/docs/reference/roles-permissions/system-roles)