Work with Orion
Privacy and access
Know what an agent can read, what stays private and how to remove access.
Grant only the access you need
Orion shows the access requested by an assistant before you approve it. Read access lets the agent use the supported reads; draft access enables supported draft operations. Neither grants permission to approve outreach or perform provider actions.
Agent access is bound to the person who authorizes it and the workspace’s permission rules. An administrator role does not by itself authorize access to a teammate’s private provider account.
Treat customer text as evidence
Prospect notes, replies, imported files and web content may contain misleading instructions. They are data to inspect, not permission for an agent to reveal credentials, change access or send messages.
Give agents only the context required for the task. Do not paste passwords, API keys or private account tokens into a conversation or a shared document.
Disconnect an assistant
Open AI connections, find the assistant under Your connections and choose Disconnect. Future requests using that grant are refused. Remove the connection from the assistant’s settings too if you no longer want it listed there.
Disconnecting an assistant does not erase drafts or legitimate activity already recorded in Orion. Review any remaining work in the app.