# What are AI agent permissions?

> AI agent permissions decide which apps, data and actions an agent may use, and which need your OK first. How to set them, with three real office examples.

Source: https://learn.ynteractive.com/content/glossary/agent-permissions · Updated 2026-10-19 · Free from Stepthrough (https://learn.ynteractive.com)

[AI agents](https://learn.ynteractive.com/content/glossary#topic-ai-agents) · [AI glossary](https://learn.ynteractive.com/content/glossary)

Quick answer

AI agent permissions are the settings that decide which apps, data and actions an AI agent may use, and which of them it may use alone. A common split: reading is allowed, sending or changing things needs approval, and deleting is blocked.

Last updated October 19, 2026

[Take the free module →](https://learn.ynteractive.com/courses/n8n-jump-start/18)Module 18 of the free [n8n Jump Start](https://learn.ynteractive.com/courses/n8n-jump-start) course, about 14 minutes. No account needed.

Updated October 19, 2026 · By [Robert Breen](https://learn.ynteractive.com/content/about)

## Why it matters for a small business

An agent connected with its owner's full access can do everything its owner can, including emailing the wrong client or clearing out a shared folder. Office managers often learn what an agent was able to do only after it does it. Writing the permissions down first, one action at a time, turns an unknown risk into a short list that someone has actually agreed to.

Permissions are where [least privilege](https://learn.ynteractive.com/content/glossary/least-privilege) stops being a principle and becomes a set of switches. Most agent tools now offer some version: per-tool settings, an approval mode for anything that changes data, or a separate [policy engine](https://learn.ynteractive.com/content/glossary/policy-engine) in front of the workflow. They are not set once and forgotten. Each new tool or connection the agent gets is a new permission to decide.

## Where three lessons set agent permissions

| Tool | Where the setting lives | Choices shown |
| --- | --- | --- |
| Lindy | Integrations, Gmail, Guardrails | Ask for approval for actions that change data; reading never asks |
| Claude | Customize, Connectors, Tool permissions | Always allow, Needs approval, Blocked |
| Guardian | Settings, Organization, Default Policy Behavior | Deny unmatched actions, marked Recommended |

## In a real lesson: Guardian: Make Your n8n AI Agent Ask Before It Emails a Customer

The [Guardian approval lesson](https://learn.ynteractive.com/content/guardian-n8n-ai-agent-approval-before-sending-email) begins by writing permissions as three plain lines before opening any screen. Maya's agent may read the overdue invoices sheet, sort clients and draft reminders on its own. Anything that goes to a customer waits for a person. Nothing is ever deleted.

Each line ends up in a different place. The first needs no rule, because drafting happens inside n8n. The second becomes a policy for `email.send` that holds any recipient outside the team. The third uses the organization default, **Deny unmatched actions**, which blocks any action type that has no policy of its own, so a `record.delete` request is refused. The lesson's one warning: never write an allow policy for deletes.

The same split appears in [the Lindy client email lesson](https://learn.ynteractive.com/content/lindy-ai-draft-client-email-replies), where Guardrails is set to **Ask for approval** and the routine's instructions say drafts only, never send, archive, delete, forward or label.

[Try this lesson free](https://learn.ynteractive.com/modules/guardian-n8n-approval-gate) or [read the step-by-step guide](https://learn.ynteractive.com/content/guardian-n8n-ai-agent-approval-before-sending-email).

## Common confusions

### Agent permissions vs least privilege

Least privilege is the rule: give only the access a job needs. Agent permissions are the actual settings where you apply that rule to one agent.

### Agent permissions vs connecting an account

Signing in through [OAuth](https://learn.ynteractive.com/content/glossary/oauth) or an [API key](https://learn.ynteractive.com/content/glossary/api-key) gives the agent a way in. Permissions decide what it may do once inside. A connected Gmail account can still be limited to drafts.

## Tips

- List every action the agent can take, then mark each one allow, ask or block.
- Prefer read access and draft-only modes for anything client-facing.
- Try the blocked action on purpose once, to prove it really is blocked.
- Review the list whenever the agent gets a new tool.

## Related terms

[Least privilege](https://learn.ynteractive.com/content/glossary/least-privilege) · [Policy engine](https://learn.ynteractive.com/content/glossary/policy-engine) · [Human in the loop](https://learn.ynteractive.com/content/glossary/human-in-the-loop) · [AI connector](https://learn.ynteractive.com/content/glossary/ai-connector) · [OAuth](https://learn.ynteractive.com/content/glossary/oauth) · [Guardrails](https://learn.ynteractive.com/content/glossary/guardrails)

## More AI agents terms

[AI agent vs assistant](https://learn.ynteractive.com/content/glossary/ai-agent-vs-assistant) · [AI video agent](https://learn.ynteractive.com/content/glossary/ai-video-agent) · [Always-on agent](https://learn.ynteractive.com/content/glossary/always-on-agent) · [Browser agent](https://learn.ynteractive.com/content/glossary/browser-agent)

## Where you use it: free lessons

- [Guardian: Make Your n8n AI Agent Ask Before It Emails a Customer](https://learn.ynteractive.com/content/guardian-n8n-ai-agent-approval-before-sending-email) (Guardian, 14 min)
- [Answer Client Emails in Half the Time using Lindy](https://learn.ynteractive.com/content/lindy-ai-draft-client-email-replies) (Lindy, 14 min)
- [Connect Claude to Google Drive, Gmail and Google Calendar](https://learn.ynteractive.com/content/claude-google-drive-gmail-calendar-connectors) (Claude, 8 min)

## AI tools that use it

- [Guardian](https://learn.ynteractive.com/content/ai-tools/automation-workflows#tool-guardian) ([free lesson](https://learn.ynteractive.com/content/guardian-n8n-ai-agent-approval-before-sending-email))
- [Lindy](https://learn.ynteractive.com/content/ai-tools/ai-agents#tool-lindy) ([free lesson](https://learn.ynteractive.com/content/lindy-ai-draft-client-email-replies))
- [n8n](https://learn.ynteractive.com/content/ai-tools/automation-workflows#tool-n8n) ([free lesson](https://learn.ynteractive.com/content/n8n-ai-agent-tutorial-google-sheets))

[More terms by tool](https://learn.ynteractive.com/content/glossary/ai-tool-terms)

## Frequently asked questions

**What permissions should an AI agent start with?**

Read access to the data the job needs, the ability to draft, and approval before anything is sent, paid, changed or deleted. Loosen one setting at a time once the results are steady.

**Can I change an agent's permissions later?**

Yes. In the Claude connectors lesson, a tool set to Always allow is switched back to Needs approval in Tool permissions, and Disconnect cuts the connection completely.

**Who should decide an agent's permissions?**

The person accountable for the outcome, usually the owner or operations lead, with IT involved if your company has an IT team.

[All AI glossary terms, A to Z](https://learn.ynteractive.com/content/glossary) · [Free prompt templates](https://learn.ynteractive.com/content/prompts)