Agent skill · security · jeremylongshore
granola-enterprise-rbac
Configure enterprise role-based access control for Granola workspaces.
Why this skill is useful
Provides specific configurations and role definitions for Granola's enterprise RBAC that the AI wouldn't reliably generate on its own.
What it needs
Requires granola account access. About 5k tokens when loaded. Last updated 2026-08-07. 2,604 stars on the source repository.
What this skill does
Granola Enterprise RBAC Overview Configure role-based access control for Granola with SSO group mapping, per-workspace permissions, sharing policies, and audit logging. Granola's role hierarchy controls who can create, share, and manage meeting notes across the organization. Prerequisites Granola Enterprise plan ($35+/user/month) Organization admin access SSO configured (Okta, Azure AD, or Google Workspace) SCIM provisioning enabled (recommended for automated role assignment) Instructions Step 1 — Understand the Role Hierarchy Step 2 — Permission Matrix Permission Owner WS Admin Lead Member Viewer Guest ----------- ------- ---------- ------ -------- -------- ------- Record meetings Yes Yes Yes Yes No No Create notes Yes Yes Yes Yes No No Share internally Yes Yes Yes Yes No No Share externally Yes Yes Policy Policy No No View shared notes Yes Yes Yes Yes Yes Yes Manage integrations Yes Yes No No No No Manage members Yes Yes No No No No View analytics Yes Yes Yes No No No Configure retention Yes Yes No No No No Manage billing Yes No No No No No Configure SSO/SCIM Yes No No No No No Step 3 — Map SSO Groups to Roles Configure in Organization Settings > Security > SSO > Group Mapping: SSO Group (IdP) Granola Workspace Granola Role ----------------- ------------------ ------------- engineering-all Engineering Member engineering-leads Engineering Admin sales-team Sales Member sales-managers Sales Admin product-team Product Member hr-team HR Member hr-directors HR Admin executives Executive Admin contractors-eng Engineering Guest Multi-workspace membership: A user can belong to multiple workspaces with different roles: Sarah Chen: Engineering (Member) + Product (Admin) + Executive (Viewer) Mike Johnson: Sales (Admin) + Engineering (Guest for cross-team visibility) Step 4 — Configure Sharing Policies Set per-workspace sharing rules to control data flow: Standard workspaces (Engineering, Product, Sales): Confidential workspaces (HR, Executive): Step 5 — Implement Least Privil …
How to use it
Reference it in AdaL, Claude Code, Cursor or any coding agent — nothing to install:
@skills jeremylongshore/granola-enterprise-rbac