> ## Documentation Index
> Fetch the complete documentation index at: https://help.worklayer.ai/llms.txt
> Use this file to discover all available pages before exploring further.

# Control agent tools and permissions

> Choose an agent’s data access and integration tools, then review company allow or block rules before saving permission changes.

A saved agent needs permission for the records and connected tools its instructions use. Review its own access and the company's provider settings together; connecting a tool does not automatically grant every agent every action.

## Check Worklayer data access

Open **Agents**, select the agent, and open **Permissions**. For each data area, choose **None**, **Read**, or **Read & write** according to the job. An agent that only summarises records needs read access; one that changes a record needs write access. The areas include People, Attendance, Expenses, Documents, Forms, Tasks, and approvals where your workspace offers them. Payroll access is read-only in the company Agent settings.

## Check connected tools

Open the agent's **Tools** section, then go to **Settings > Integrations > Active** for any company provider it uses. In the provider's **Tool permissions** tab, read the **Read-only tools** and **Write/delete tools** groups. Use **Always allow** or **Block** according to the company decision. Company **Settings > Agents** also has **Allow** and **Block** controls for broader agent capabilities; a block there can prevent a tool even when the provider is connected.

## Save changes together

Return to the agent and choose **Save**. If instructions and permissions changed, **Review permission changes** shows the new access before it is applied. If Worklayer says you cannot grant a permission, ask someone with access-management permission to save it. If the agent or its permissions changed while you were editing, check permissions again; the app keeps your draft instructions for review.

## When a run asks for access

Open the run's **Needs action** item. Read which permission it needs to plan or execute and decide whether that access matches the agent's job. Grant only the required level, then return to the run and verify the result.

## Next steps

[Connect company tools](https://help.worklayer.ai/help/integrations/overview.md) · [Review agent runs](https://help.worklayer.ai/help/agents/specialised-agents/run-history.md)


This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.