Skip to main content
A saved agent needs permission for the records and connected tools its instructions use. Review its own access and the company’s provider settings together; connecting a tool does not automatically grant every agent every action.

​
Check Worklayer data access

Open Agents, select the agent, and open Permissions. For each data area, choose None, Read, or Read & write according to the job. An agent that only summarises records needs read access; one that changes a record needs write access. The areas include People, Attendance, Expenses, Documents, Forms, Tasks, and approvals where your workspace offers them. Payroll access is read-only in the company Agent settings.

​
Check connected tools

Open the agent’s Tools section, then go to Settings > Integrations > Active for any company provider it uses. In the provider’s Tool permissions tab, read the Read-only tools and Write/delete tools groups. Use Always allow or Block according to the company decision. Company Settings > Agents also has Allow and Block controls for broader agent capabilities; a block there can prevent a tool even when the provider is connected.

​
Save changes together

Return to the agent and choose Save. If instructions and permissions changed, Review permission changes shows the new access before it is applied. If Worklayer says you cannot grant a permission, ask someone with access-management permission to save it. If the agent or its permissions changed while you were editing, check permissions again; the app keeps your draft instructions for review.

​
When a run asks for access

Open the run’s Needs action item. Read which permission it needs to plan or execute and decide whether that access matches the agent’s job. Grant only the required level, then return to the run and verify the result.

​
Next steps

Connect company tools · Review agent runs