Airtable Permissions, Sharing and Sensitive Data Review
Check collaborators, shared views and forms (defensive).
The Open buttons send the prompt text as currently shown below to that site only when you click. Fill in the placeholders first.
[VERIFY] is an editorial flag, not a blank to fill. Wherever the prompt shows [VERIFY], check that item against a reliable source before you use it.
Review access to an Airtable base as a defensive check of my own data. Collaborators and their permission levels: [COLLABORATORS]. Shared views, forms and links: [SHARED_ITEMS]. Types of data held: [DATA_TYPES]. Our policy: [POLICY]. Rank findings by the amount and sensitivity of data exposed and how many people could see it. Check for people with more access than needed, former colleagues, public share links to views with sensitive fields, forms collecting more data than needed, attachments with sensitive content, and API tokens or integrations I may have forgotten. For public links and forms, explain what an outside person could see or do, using only what I describe. Recommend least privilege and removal of unused links. Include a same-day leaver procedure, the steps if sensitive data was shared by mistake, and a short message to collaborators confirming their access. Tokens and integrations count as access and should be reviewed by the person responsible for the account [VERIFY]. Return a table with Item, Risk, Action and Owner, set a quarterly review, mark permission names [VERIFY], and do not ask me to paste tokens or secrets.
Fill in before use
Optional: type your details and the prompt above updates. Nothing is saved or sent.
Replace each bracketed placeholder with your own details, then paste into Any AI or another assistant.