Start with as much read-only access as possible before letting agents write back into systems—let agents only read calendar or inbox first, not send emails or add calendar events—because write access should be added only after you watch the agent behave for a few weeks and have enough trust.