Company and Group Boundaries
A tenant or workspace is a company's data scope in COS. One user account can belong to several companies; roles and unit assignments are evaluated within each company.
Company selection
Selecting a company in the top bar opens that company's organization, planning/OKR cycles, analyses, KPIs and reports. Knowing a record ID from another company does not grant access.
The user account is shared across companies; each company's membership, role and unit assignments are separate. Removing a person from one company therefore does not automatically remove their other memberships. See User Management.
Group / holding access
A group contains several companies. A Group Admin has authorized access to their group's companies and can switch between them. This does not grant access to every company on the platform. A company Admin membership and group administration are separate assignments.
The Super Admin manages platform-scoped operations. Administrative access without a company membership is distinct from holding that membership. Group Management explains ownership, invitations and leaving a group.
Reading and writing within a company
Members and Team Leads can read business records across the company. Write scope is narrower: Members update progress for their responsibilities/contributions, while Team Leads manage their led subtree. Individual performance and confidential OKRs have additional restrictions. Roles & Permissions explains rules by record type.
Enabling a module or displaying a menu does not reveal another company's records. A suspended company is read-only for company users; the Super Admin and its Group Admin can make corrections.
Report unexpected access
If you see unexpected company or record information, check the selected company and your role. Record the time, record ID and steps, then report them to your organization's COS administrator. Do not share access tokens, license keys or unnecessary copies of personal data.