Before connecting an assistant to tools

List the actions the assistant needs before connecting accounts. Reading an appointment and canceling an appointment need different permissions. Begin with read access and add individual write actions only when the workflow requires them.

Try the workflow with disposable development records. Ask it to identify the record, describe the proposed change, and show the result after execution. Check the system of record directly; a confident chat response is not proof that the change was saved.

Give the integration its own credential, restrict its scope, and record how to revoke it. Keep personal administrator credentials out of the configuration. If a credential leaks, an independent integration account makes containment easier.

Decide what needs human approval before running real work. Sending a draft for review and sending a customer message are different actions. Make approval apply to the concrete recipient and message, and recheck it if either changes.