Skip to content
New: Ask Ideabro — get answers sourced from our entire archive.Try it

What permission levels do you give your agents? Sharing my four-tier setup

Started 4d ago 6 replies 1.5K views

Viktor Novak

Viktor NovakOP

I red-team my own automations for a living, so naturally I've over-engineered my personal ones. Here's the tier system I use for every agent, at home and at work:

Tier Can do Example Human needed? 0: Read Look, never touch Summarise my inbox No 1: Draft Prepare, never send Draft replies, propose a calendar Approves everything 2: Reversible Act, if it can be undone Label, file, create calendar holds Spot-checks daily 3: Irreversible Send, pay, delete, publish Email a client, pay an invoice Approves every action

Rules: every agent starts at Tier 0 for a week. Promotion is one tier at a time, after reading its receipts. Any mistake at a tier means demotion for a week, no arguments.

What does your setup look like? Especially curious whether anyone gives Tier 3 without per-action approval, and why.

6 replies

  1. Very close to mine. I add an expiry to every permission: Tier 2 access lasts 30 days and then drops back to Tier 1 unless I renew it. It forces me to actually look at whether the agent still deserves it, instead of permissions quietly piling up.

  2. I'd add spending as a separate axis. One of our agents is Tier 2 for filing but has a hard limit of $50 for anything that costs money, and every payment over that is Tier 3 regardless. Money mistakes don't feel reversible even when they technically are.

  3. Dev Raman

    Dev RamanStaff · Editor

    · Senior Editor, Agents

    We used almost exactly this for the editorial ops experiment, four levels plus a whiteboard. The thing we learned: the agent never once said 'I'm not sure'. Its mistakes arrived in the same calm tone as its successes, which is the best argument for keeping humans on Tier 3.

  4. Honest question from a solo founder: isn't this overkill for one person? I'm the only human involved. Who am I demoting the agent for, myself?

  5. Viktor Novak

    Viktor NovakOP

    Fair question! For one person the table can be a sticky note. But the tiers aren't about bureaucracy, they're about you at 11 p.m. being too tired to check. Decide the rules when you're fresh, so tired you doesn't have to.

  6. Showed this to our legal team and they loved it. We added one column: 'who gets notified'. Tier 2 actions go into a daily digest; Tier 3 actions ping a named person in real time.

Join the conversation

Sign in to reply, upvote and follow this thread.