Answer a permission card

An employee asks before it does something risky. It declares those steps up front, so you see one card for the task instead of many pop-ups.

What needs your approval

Seven kinds of actions ask first:

• Spending money.
• Sending to someone new.
• Deleting for good.
• Account or security changes.
• Signing or agreeing to something.
• Using a plugin for the first time.
• Running a dangerous command.

Answer it

Each row on the card has three buttons:

• Allow once: just this time.
• Always allow: a permanent rule. For a purchase, you can set a limit first.
• Deny: refuse. The employee remembers, and carries on with what it can.

"Allow all once" answers every row at once. New rows join the same card and are announced to screen readers.

When there is no Always allow

Content the employee read, such as a web page or email, can never authorize an action. If a target came from such content, or the task was started by a webhook, the row has no Always allow button.

If you do nothing

A reminder appears. After 7 days the card lapses, the step is dropped, and the work continues without it.

If it doesn't work

• If an action seems to run without asking, check your rules. See Manage your rules.
• Saying "yes" on a voice call never approves. It can only mark an option, and you tap to confirm.
• "This answer has run out." or "This answer couldn't be checked." An answer from a notification or your watch only works for a short time, and only once. Open the card to answer.

If you're a guest

When someone shares an employee with you, some answers stay with them.

• "This one is for the owner to approve." They see the same card. You can still say no.
• "Only the owner can make a standing rule." Choose Allow once if it's offered.
• "You can watch the employee's screen, but not take it over." Ask the owner to take over.