← Evaluation, Safety & Reliability
11 · Evaluation, Safety & Reliability

What Are Permissions in an AI System?

Permissions define what data, tools, systems, and actions an AI application or agent is allowed to access.

A capable AI system should still operate within clear boundaries.

Permission check

AGENT
↓
PROPOSED ACTION
↓
PERMISSION CHECKREAD? · WRITE? · DELETE? · SEND? · PAY?
ALLOWED→ Execute
BLOCKED→ Stop
REVIEW REQUIRED→ Human Approval

Capability does not equal permission.

Read / Write / Execute

READ

View information.

Example: read invoice

WRITE

Change information.

Example: update CRM record

EXECUTE

Trigger an external action.

Example: send email · release payment

Least Privilege

Give the AI only the access required for the task.

NEEDED ACCESS ✓

READ invoice

READ policy

UNNEEDED ACCESS ✕

DELETE invoice

CHANGE bank account

RELEASE payment

Permission vs Tool Access

TOOL ACCESS

A tool exists and can potentially be used.

PERMISSION

Determines whether a specific action is allowed.

The email tool exists. The agent may draft an email; sending may require permission or approval.

Permission vs Human Approval

PERMISSION

System authorization rule.

HUMAN APPROVAL

A person reviews a selected action.

The agent may propose refunds. Refunds over $500 require manager approval.

One real example · AI Finance Agent

CAN

read invoice

check ERP

flag mismatch

CANNOT

change bank account

release payment

delete transaction

Unless: specific permission + role + approval where required.

Layered Safety

AGENT CAPABILITY↓TOOL RESTRICTION↓PERMISSION↓VALIDATION↓HUMAN APPROVAL↓ACTION

Safety comes from layered controls, not from trusting the model alone.

What it is NOT

Permission ≠ Tool

A tool is a callable capability; permission decides whether this action may use it.

Permission ≠ Guardrail

Permission authorizes access; a guardrail is a broader control for inputs, outputs, or actions.

Permission ≠ Human Approval

Permission is a system rule; approval is a person reviewing a selected action.

Tool Access ≠ Unlimited Authority

Having a tool does not permit every operation, record, amount, or recipient.

Remember this

Permissions define what an AI system is allowed to access and do, even when it has the capability to do more.

Independent explainer

Video

visual explainer

A video explainer for Permissions & Safety will appear here.

↑