What access does the agent need to our systems?

“Exactly the permissions of the step it takes over, and no more. No shared service account, no administrator rights for convenience, no credentials that outlive the task. If a process can only be automated with broad access, we say so before the project rather than during it.”