Skip to main content

​
Overview

When the assistant wants to run an action that changes data (creating a record, sending an email, updating a field) it pauses and asks you to approve it. If you choose Always allow on that prompt, Custral saves a standing permission rule so the assistant won’t ask again for that action. The Permissions tab (Settings → AI → Rules & Skills → Permissions) is where those rules live. It’s the single place to see everything the assistant is allowed to do on its own, and to revoke any of it.

​
Modes

Every assistant chat runs in one of two modes, chosen from the mode control in the composer (or by pressing ⇧Tab). Your choice applies to the current chat.
  • Ask (default). The assistant confirms every change before it happens. Reading and searching run freely; anything that writes (creating a record, updating a field) or is irreversible (sending an email, deleting, archiving) waits for your approval.
  • Auto: the assistant works on its own, running writes without asking. It still pauses before irreversible actions (sending email, deleting, archiving), so Auto is a faster loop, not a blank cheque.
Standing permission rules (below) sit on top of both modes: an Always allow rule lets even Ask mode run that one action without pausing, and an Always deny rule blocks it in Auto mode.

​
How it works

  • Rules are created from the approval prompt, not here. You can’t add a rule from this screen. It only appears after you choose Always allow (or Always deny) during a run. This screen is for reviewing and revoking.
  • Decision is either Always allow (the action runs without asking) or Always deny (the assistant never runs it).
  • Scope controls how broadly the rule applies:
    • Any use: every time the assistant uses that action.
    • Object: …: only on a specific object (e.g. only when creating Contacts).
    • When …: only when a specific argument matches (e.g. only when status is open).
  • Applies to is either Just you (a personal rule) or Whole workspace (everyone’s assistant honours it).
  • Deny beats allow. If two rules match the same action, the deny wins, a safe default.

​
Using it

  1. Ask the assistant to do something that changes data (e.g. “create a contact for Jane Doe”).
  2. When the approval card appears, choose Always allow if you want the assistant to stop asking for that action.
  3. Open Settings → AI → Rules & Skills → Permissions to see the saved rule, who added it, and when.
  4. Click Revoke on any rule to make the assistant ask for approval again next time.

​
Troubleshooting

  • The assistant keeps asking even though I clicked “Always allow.” The saved rule may be narrowly scoped (e.g. to one object or one argument value) and the new action doesn’t match it. Check the rule’s Scope here. Revoke it and choose Always allow again on the broader action if you want it to cover more cases.
  • The assistant refuses an action it used to do. Look for an Always deny rule on that action and Revoke it.
  • I revoked a rule but nothing changed. Revoking takes effect on the next run. A run already in progress uses the rules that were in place when it started.
  • A teammate’s action is blocked/allowed unexpectedly. Check the Applies to column, a Whole workspace rule affects everyone. Personal rules (Just you) only affect the person who created them.
  • I don’t see any rules. That’s expected until someone chooses Always allow / Always deny on an assistant prompt. Standing rules are never created automatically.