Least-privilege access

Least privilege is an old security rule that matters more with AI agents, because an agent acts quickly and at scale. If a support agent can only look up orders and open returns, a confused or manipulated agent cannot delete products or export your customer list. How to apply it to agents: give each agent a narrow job, enable only the tools and data that job uses, assign it only the channels it should answer, and require approval for actions it decides on by itself, even within its access. Review access when the job changes. In Concierge, you tick only the capabilities each agent may use on its configuration page, and an agent without a capability cannot use it, however it is asked.