Three levels of access
- Read: the assistant looks at data and explains it. This is the safe starting point.
- Propose: the assistant writes a change as a draft that a person can review.
- Apply: the assistant sends the change. This level needs approval, a retry-safe request and a read-back.
Rules that hold for any tool
- Start every connection as read-only and widen it only for a reason.
- New ads start paused, and a person turns them on.
- Cap budgets and changes per day, so one wrong request cannot spend freely.
- Log the person who approved each change, not only the assistant that sent it.
Questions to ask a vendor
- Does it separate read access from write access, and can you turn writing off?
- Does it show a preview of the exact change before sending it?
- Does it read the object back after the change?
- Where is the log, and can you export it?
Where to be careful
Platform connectors and third party servers change quickly, and terms, limits and beta access differ between them. Check the current documentation of each platform and tool before you rely on a feature.










