A practical starting point
Work through these checks in order. Use the results to decide what needs to change in your own workflow.
- Separate read and write capabilities.
- Limit resources and actions to the intended scope.
- Require explicit approval for consequential operations.
An assistant drafting a report may need read access to records but no ability to delete or alter them.
A mistake to avoid
Do not grant administrator access just to simplify integration.
How to check progress
Review actual tool usage against granted permissions and remove unused capabilities.
Your action checklist
Use this checklist while reviewing your own setup. Checkmarks are temporary and stay in this open page.
Need the wider workflow?
This quick note covers one decision. For a worked example, decision table and a fuller implementation workflow, read Choosing an agent when a workflow is not a fixed script.
Further reading
Official background resources for this topic. The workflow above is general guidance, not a guarantee of a particular result.
AI-assisted editorial content. Examples are illustrative, not client case studies. Read our editorial policy or report a correction.