Edit agent access without replacing its identity
Grant Product KPI creation, selected KPI actions and project automation access, and delete agents while retaining audit history.
Create an agent once, then change its resource permissions without replacing its identity or credentials. The permission editor separates project View, Edit and Admin access from Product KPI creation, individual KPI Read, Record and Manage, and automation management.
Give access to the KPI that needs work
An agent with Create KPIs for one Product can create a KPI there and receive an explicit Manage grant in the same transaction. It receives no access to that Product’s existing KPIs. A human can later remove the new KPI’s grant, or grant access to all current and future KPIs in a selected Product.
Record permits measurement updates without definition changes. Formula KPIs stay calculated. A KPI measurement does not reveal its underlying private issues or initiative links.
Keep past work when an agent leaves
Delete agent permanently revokes access, releases its slot and hides it from active lists. Active automations that execute as the agent are disabled. Past work, attribution and audit history remain. Disable remains a separate reversible action.
Use the same scope through REST, CLI and MCP
Agent KPI creates require an explicit Product or Organization owner. Auth context reports grants and effective project sources. Permission administration requires a human session and an expected revision. Existing agents keep their identities and credentials through migration. Project webhook provisioning and delivery remain a separate change.