Tool permissions separate reading from actions that change data or communicate outside the product. Review permissions for chat, leading a task and assisting a task independently.
Turning off Scout Agent is a broad control. Read the displayed effect and coordinate with owners of active work before using it.
Before you start
You need workspace administration permission. Understand the effect of the specific capability before enabling it.
Permissions controls apply alongside channel and connection access.
Review tool permissions
Open Scout → Deploy → Permissions.
Review the global Scout Agent and connected-assistant controls. Read the displayed effect before changing either.
Find the capability group you want to configure. Compare the Scout Chat, Scout Agent leads and Scout Agent assists columns.
Choose the available policy for that capability: Always allow, Needs approval or Never. Some options are fixed or unavailable for particular capabilities.
Open the Email or Phone customization link for channel-specific approval and contact rules.
Test the intended action in its actual context and verify whether it proceeds, asks for approval or is unavailable.
Check the result
The visible policy matches your team’s intent for each context. A working connection and any additional channel controls remain necessary for the action to execute.
Reading and changing data
The page identifies capabilities that are always allowed because they read information. A change, publication or external action may have a separate approval requirement. Read the capability’s description rather than choosing policy only by its name.
A playbook capability chip describes something a step can use. It does not grant access or override these permissions.
Connected assistants
Connected assistants work under the member’s identity and the applicable Scout Chat policies. Review the connection’s actual scope and current health as well as the workspace setting.
If something does not look right
What you see | What to check |
A policy option is disabled | The capability may enforce a fixed policy or support only some choices. Read the description and available controls. |
An allowed action cannot run | Check connection health, account access, channel readiness, contact rules and budget availability. |
Does Always allow bypass every other control?
Does Always allow bypass every other control?
No. The capability remains subject to its connection, task context and applicable channel or provider requirements.
Continue your work
Open the relevant area in Cartograph to continue with your workspace data.

