Security and Compliance Material Review for Product Usage Data Analysis: Permission and Data Isolation

Data for this category primarily comes from tracking systems, data warehouses, CRM systems, and ticket systems. Update cycles are mostly daily or

Data Characteristics for This Category

Data for this category primarily comes from tracking systems, data warehouses, CRM systems, and ticket systems. Update cycles are mostly daily or weekly. Regularly produced documents include usage analysis reports, tracking plans, indicator definition tables, and dashboard request forms. Data fields cover function access frequency, customer behavior paths, renewal trigger nodes, and more. Units are mostly times, minutes, and person-times. Unified indicator definitions must be aligned with business context.

Constraints on Permission and Data Isolation

Scattered data sources connected to multiple business systems require permission isolation to cover access scopes for different data sources. In multi-team and multi-member collaboration scenarios, operation permissions must be differentiated for roles such as product operations and data analysts. This prevents unauthorized modification of tracking plans or indicator definitions. Cross-customer behavior insight data must be strictly isolated to avoid leakage of different customers’ usage data. In daily batch data processing workflows, access to raw data and analysis results by unauthorized personnel must be restricted. This avoids operational errors caused by incorrect indicator judgments.

This document applies to FastGPT v4.17.0. The following are specific configuration instructions:

How to Configure Settings

Configuration ItemRecommended ApproachRationale
teamIdDivide by business line, each business line corresponds to a dedicated teamIdIsolate data analysis resources and access permissions for different business lines
tmbIdConfigure by role, assign a dedicated tmbId to the data analyst roleDifferentiate operation scope and data access permissions for different members
Data access scopeLimit to the tracking systems and CRM data associated with the current teamPrevent cross-team data leakage
Batch analysis task permissionsOnly granted to team administrators and data analystsPrevent unauthorized personnel from modifying tracking plans or indicator definitions
Session record isolationIsolate conversation analysis results by teamMatch permission isolation requirements for multi-team collaboration

Three Common Mistakes

  • The interface displays the prompt "No permission to operate this conversation record". The cause is that the current member’s tmbId has not been granted access permission for the corresponding conversation record, or the teamId configuration does not match the current team’s scope.
  • The number of guest login window links cannot be adjusted to 100. The cause is that the team edition package defaults to a limit of 10 links, and the custom quantity threshold has not been configured by the team administrator.
  • Local deployment model testing displays a permission error. The cause is that the teamId is not associated with the access permission for the corresponding model, or the configured token has not been granted model call permission.

How to Verify Successful Configuration

  • Switch between different teamId configurations, verify that only the data analysis results and raw data corresponding to the current business line can be viewed.
  • Log in with the tmbId of the data analyst role, verify that batch analysis tasks can be initiated; log in with the tmbId of a regular operations role, verify that tracking plans and indicator definitions cannot be modified.
  • Enter the team settings page, verify that the number of guest login window links can be adjusted to the range allowed by the team package.
  • Initiate a test call for the locally deployed model, verify that no permission error occurs and that analysis results can be generated normally.

The values provided here are common starting points, and should be evaluated against the reader’s own samples.

Question material comes from public community discussions. Configuration values are common starting points and should be measured against your own samples. Verified on 2026-10-19.