# Access and sharing

Access is set for each wiki. A wiki is either open to everyone in the organization or restricted to the people and teams you grant. Agents have the same access as the person they act for.

## Open and restricted wikis

| Access | Who can read and write |
|---|---|
| Open (default) | Every member can read and write. Admins are owners. |
| Restricted | Only the people and teams granted access. Other members can't see the wiki or its name. |

The `general` wiki is always open.

## Access levels

| Level | Can |
|---|---|
| Reader | Read pages, records, history, and notes. |
| Author | Everything a reader can, plus write pages and records, and add and resolve notes. |
| Owner | Everything an author can, plus delete pages and change access. |

On an open wiki, a grant can raise a member's level. For example, granting a member owner access lets them delete pages.

## Change access

1. Open the wiki menu and click **Admin** on the wiki's row.
2. Choose **open** or **restricted**, and add people and teams with a level.
3. Save your changes.

Changing access requires owner access to the wiki or an admin role.

With the CLI:

```
known acme wiki grant finance team:founders:author
known acme wiki grant finance user:<user-id>:reader
known acme wiki update finance --restricted
known acme wiki revoke finance user:<user-id>
```

A wiki needs at least one grant before you can restrict it, and a restricted wiki must keep at least one grant.

## What admins can see

Admins can see every wiki and who has access to it, and can change access. They can't read a restricted wiki's pages unless they're granted access. If an admin grants themselves access, the wiki's owners can see that they did.

## Share a wiki with another organization

Owners can share a wiki with another organization, such as a customer or an investor:

1. Open the wiki's **Admin** page.
2. Under **Shared with**, enter the other organization's address.
3. Select **Reader** or **Author**, and click **Share**.

An admin of the other organization accepts the invitation from their organization menu and chooses which of their people get access. Their people can't get a higher level than the one you chose.

The wiki and its history stay in your organization. Changes made by the other organization's people show which organization they came from. You can stop sharing at any time, and the other organization can leave the share.

## FAQ

### Can I restrict a single page?

No. Access is set per wiki. To restrict some pages, move them to their own [wiki](https://known.info/docs/wikis).

### What can a connected agent access?

The same wikis as the person who connected it, in the organizations they allowed. See [Agents](https://known.info/docs/agents).