Gate access to other members’ agent sessions with a new chat:read scope

A new RBAC scope lets you decide who can read other members’ agent session transcripts. Everyone can always read their own sessions; reading everyone’s now requires an explicit grant.

Features

• chat:read scope for agent session transcripts #3688  - A new chat:read scope gates access to other members’ agent session transcripts: anyone can read sessions they own, while reading every member’s session requires an unrestricted chat:read. The scope is not a default of any system role — not even admin — so it must be granted via a custom role. Members without it see only their own sessions, and each dashboard session open is recorded in the audit log. (Author: @adaam2 )