Agent With File Access
Limit AI agent context and file access to the minimum needed for a confidential task.
The agent can see far more than the renewal-risk task requires. What should Asha do before asking the agent for the renewal-risk summary? Create a narrow task folder with only approved renewal files, then run the agent on that folder. Right. This applies least privilege and reduces both accidental disclosure and indirect prompt injection risk. Keep full shared-drive access because the agent may find useful background. Too broad. Helpful context is not a reason to expose payroll, acquisition notes, or unrelated confidential data. Ask the agent not to read payroll or acquisition files. Weak control. Instructions inside a prompt are…
Sign up free — one personalized lesson every day, matched to your role and goals.
Already have an account? Sign in