Deciding what a tool-using agent can read and change

Start with one task and give the agent only the access needed to complete it. This article follows the permission decisions from read-only source material through to an action that requires a person to approve it.