> ## Documentation Index
> Fetch the complete documentation index at: https://docs.custral.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Permissions

> The assistant's Ask / Auto modes, plus the standing “always allow” rules that let it run an action without asking.

## Overview

When the assistant wants to run an action that **changes data** (creating a record, sending an email, updating a field) it pauses and asks you to approve it. If you choose **Always allow** on that prompt, Custral saves a standing **permission rule** so the assistant won't ask again for that action.

The **Permissions** tab (**Settings → AI → Rules & Skills → Permissions**) is where those rules live. It's the single place to see everything the assistant is allowed to do on its own, and to revoke any of it.

## Modes

Every assistant chat runs in one of two modes, chosen from the mode control in the composer (or by pressing **⇧Tab**). Your choice applies to the current chat.

* **Ask** *(default)*. The assistant confirms **every** change before it happens. Reading and searching run freely; anything that writes (creating a record, updating a field) or is irreversible (sending an email, deleting, archiving) waits for your approval.
* **Auto**: the assistant works on its own, running writes without asking. It **still pauses before irreversible actions** (sending email, deleting, archiving), so Auto is a faster loop, not a blank cheque.

Standing **permission rules** (below) sit on top of both modes: an *Always allow* rule lets even **Ask** mode run that one action without pausing, and an *Always deny* rule blocks it in **Auto** mode.

## How it works

* **Rules are created from the approval prompt, not here.** You can't add a rule from this screen. It only appears after you choose *Always allow* (or *Always deny*) during a run. This screen is for reviewing and revoking.
* **Decision** is either *Always allow* (the action runs without asking) or *Always deny* (the assistant never runs it).
* **Scope** controls how broadly the rule applies:
  * **Any use**: every time the assistant uses that action.
  * **Object: …**: only on a specific object (e.g. only when creating *Contacts*).
  * **When …**: only when a specific argument matches (e.g. only when `status` is `open`).
* **Applies to** is either **Just you** (a personal rule) or **Whole workspace** (everyone's assistant honours it).
* **Deny beats allow.** If two rules match the same action, the deny wins, a safe default.

## Using it

1. Ask the assistant to do something that changes data (e.g. *"create a contact for Jane Doe"*).
2. When the approval card appears, choose **Always allow** if you want the assistant to stop asking for that action.
3. Open **Settings → AI → Rules & Skills → Permissions** to see the saved rule, who added it, and when.
4. Click **Revoke** on any rule to make the assistant ask for approval again next time.

## Troubleshooting

* **The assistant keeps asking even though I clicked "Always allow."** The saved rule may be narrowly scoped (e.g. to one object or one argument value) and the new action doesn't match it. Check the rule's **Scope** here. Revoke it and choose *Always allow* again on the broader action if you want it to cover more cases.
* **The assistant refuses an action it used to do.** Look for an *Always deny* rule on that action and **Revoke** it.
* **I revoked a rule but nothing changed.** Revoking takes effect on the next run. A run already in progress uses the rules that were in place when it started.
* **A teammate's action is blocked/allowed unexpectedly.** Check the **Applies to** column, a **Whole workspace** rule affects everyone. Personal rules (**Just you**) only affect the person who created them.
* **I don't see any rules.** That's expected until someone chooses *Always allow* / *Always deny* on an assistant prompt. Standing rules are never created automatically.

## Related

* [Provider Tools](/ai/provider-tools): write actions the assistant can take, gated by these permissions.
* [Rules & Skills](/ai/rules-and-skills): guidance and procedures for the assistant.
* [AI Settings](/ai/overview)


## Related topics

- [Global Permissions](/team/permissions/global.md)
- [Permissions Overview](/team/permissions/overview.md)
- [Team & Permissions](/team/overview.md)
- [Object Views](/surfaces/records/views.md)
- [Fields](/data/records/fields.md)