AI Permission Hygiene

Simple Definition

AI permission hygiene is the habit of giving AI tools only the access they truly need, reviewing those permissions regularly, and requiring human approval before risky actions.

In practice, it means you do not connect every inbox, calendar, file, browser, or app to an AI assistant by default. You give limited access, check it often, and remove access when it is no longer needed.

Why It Matters

The more an AI tool can see and do, the more damage a mistake, or an attack, can cause. Tight permissions keep small problems from becoming big ones, and make it easier to trust an AI with real work.

Example

Instead of giving an AI tool full email access, you use read-only access, or you manually upload only the single message you want help with. If the AI ever needs to send, delete, or pay, you approve that step yourself.

Indirect Prompt Injection, an attack that becomes far less dangerous with tight permissions
AI Agent, agents that take actions need the most careful permission control
AI Assistant, assistants often request access to your apps and data
AI Safety, the broader practice of using AI securely and responsibly
Related guide: AI permission hygiene