Skip to content

AI agents

Choose the right business and permissions for an AI agent

By VentES · Updated · 2 min read

Understand business-scoped connections, read and write permissions, app access and revocation in VentES.

Before you start

  • Know which organization should own the work.
  • Have a verified owner or administrator account for that organization.

Choose one business per connection

Select the intended business on the VentES consent screen. The token issued for that connection is bound to that business. For another business, start another authorization and select its workspace; naming a different business in a prompt does not switch the existing connection.

Try this prompt

Before doing any work, show the VentES business context for this connection and ask me to confirm it is the business I mean.

Read permissions retrieve information

A scope such as crm:read lets the agent use available CRM read tools for the selected business. Read access can expose business information to the client you authorize, so choose the apps relevant to the task. Start with one app when testing a new connection.

  • A summary or search can execute without a separate write-approval screen.
  • A tool must exist at the gateway as well as being permitted for your account.
  • Authorizing one app does not grant access to every app.

Write permissions prepare proposals

A scope such as crm:write lets the client prepare supported changes for human approval. The returned link lets you review the actual business, capability and field values. You then choose Approve and execute or Reject in VentES. A chat message saying “approved” does not replace that screen.

Your app access still applies

Agent permissions sit alongside current membership and application access. VentES checks active organization membership, owner/admin role and valid app access through a personal subscription or assigned organization seat. A previous connection cannot restore access after those permissions are removed.

Revoke or change a connection

Open AI agent connections, select the business and choose Revoke access for the client. To change its capabilities, revoke the old connection and reconnect with the new selection. Revocation blocks future use of that connection; it does not undo completed actions or remove information the client already received.

Maintained by VentES. Tell us if a step needs updating.

Related guides