Permissions Review for Connected Tools
Check what an assistant can reach and trim it to what it needs.
Added October 15, 2026. Written with AI assistance and checked for clarity and placeholders; not reviewed by a lawyer, accountant, clinician or other professional. How these prompts are made
The Open buttons send the prompt text as currently shown below to that site only when you click. Fill in the placeholders first.
Review the permissions given to an AI assistant or automation. Tools connected: [CONNECTED_TOOLS]. Permissions granted to each: [PERMISSIONS]. Tasks the assistant actually performs: [ACTUAL_TASKS]. For each permission compare it with the tasks, and classify it as needed, convenient but unnecessary, or risky. Apply least privilege: read before write, narrow folders instead of whole drives, separate accounts for the assistant, and expiry dates on access. Return a table with Tool, Permission, Needed for, Verdict and Replacement, a revoke-first list of the five riskiest permissions, and a quarterly review routine with an owner. Do not store credentials in prompts or documents. Also check shared and inherited access, such as team folders and mailing lists, for permissions the assistant gets indirectly, and record which accounts own each connection so access can be removed quickly when someone leaves. Finish with a one-page register of connected tools showing owner, purpose, date access was granted, last review date and the next review date, so the review becomes routine rather than occasional.
Fill in before use
Optional: type your details and the prompt above updates. Nothing is saved or sent.
Replace each bracketed placeholder with your own details, then paste into Any AI or another assistant.