---
title: "Agent permissions: you decide how far it goes | SalexHub"
description: "Turn how far the Agent goes on its own, decide who sees what once, let the right people decide what waits, and read who did what."
url: "https://salexhub.com/product/agent/permissions"
---

# You decide how far it goes.

The Agent never holds more rights than its person. Turn the dial to see what it does on its own.

## How far the Agent goes on its own

Four modes: Ask every time, Edit records, Edit and send, Full autonomy. Ask every time is the default, and out of the box only the Owner may change it. Money, addresses, statuses and bank details the Agent writes, and anything it writes after reading outside text, arrive as cards in every mode, and an approval rule holds a step for its approvers whoever started it. [Autonomy and approvals](https://salexhub.com/docs/agent/autonomy).

- **Read your records**: On its own from Ask every time; asks first before that.
- **Update records, where you allow it**: On its own from Edit records; asks first before that.
- **Send email from your mailbox**: On its own from Edit and send; asks first before that.
- **Issue an invoice, change a pipeline**: On its own from Full autonomy; asks first before that.
- **Change who sees what, export in bulk**: Always asks
- **Decide an approval, erase a person's data**: People only

## Three questions, answered once

Seven built-in roles and your own; nobody decides their own request; acts are kept for 24 months, and how far back you read depends on your plan.

- **Who sees what**: Roles, teams and each field's access. View as user shows what one person reaches. [Control & audit](https://salexhub.com/platform/control)
- **What waits for whom**: An order over an amount, a quote over a discount: the people a rule names decide, in order. [Approval rules](https://salexhub.com/docs/control/approval-rules)
- **Who did what**: Every act on the record, refusals too. Filter it, or ask the Agent what happened. [The audit log](https://salexhub.com/docs/control/audit-log)

## Each property, its own rule

Never change it, propose a change, or change it. Money, addresses and statuses always ask. A property's AI tab, What AI may do, with its four choices: Default, where the Agent changes it when you could and agents and workflows suggest a value someone approves; Never change it; Propose a change; Change it.

## Some acts always ask. Some are never its own

Access, exports and anything public ask at any setting. Erasing a person or deciding an approval stays with people. Two lists. A card at any setting: inviting a member, changing a role, sharing rules, a bulk export, a quote shared by link, workflows and industry packs. Never the Agent's: erasing a person's data, deciding an approval, creating API keys, connecting a mailbox, changing billing.

## Many changes, one review

Approve them all, or one by one. Each shows the value before and after. Four changes from one answer waiting for approval: two stages moved, an owner changed and a deal archived, each with its value before and after, the archive marked as one that cannot be undone, with Approve all 4 and Review one by one.

## Every change, on the record

What ran without a click and what you approved, each with Undo. The changes of one answer as the conversation lists them: an update that ran without a click, a task you approved, a record archived and recoverable for 30 days, and Undo for the answer.

## Who decides how far

The organization sets the ceiling. A role or a person can be narrower. Only the Owner changes it at first. How much the Agent may do on its own, in four layers: the organization at Edit and send, the Member role at Edit records, one person at Ask every time, and the conversation's own chip.

## Hired agents carry their own limits

Each has its level and a budget per run. Members and teams have budgets too. A hired agent with its level, Proposer, and its budget of 40 AI credits a run and 600 a month, beside the AI credit budgets of the Sales team and of one member.

## Next

[The Agent](https://salexhub.com/product/agent) · [Agent team](https://salexhub.com/product/agent/team) · [Control & audit](https://salexhub.com/platform/control) · [AI Gateway budgets](https://salexhub.com/platform/ai-gateway) · [Approve a large order first](https://salexhub.com/use-cases/approve-large-orders) · [Autonomy and approvals, in the docs](https://salexhub.com/docs/agent/autonomy)

## Set it once. Read it back any time

Choose the roles and the rules, and let the Agent work inside them.

---

The same page for people: https://salexhub.com/product/agent/permissions. Index of this site for agents: https://salexhub.com/llms.txt