Set agent permissions
Agent permissions control what an agent can read, write, browse, fetch, and run.Agent permissions
OpenAgent Settings > Permissions.
Permission areas include:
- Sandbox
- Readable file roots
- Writable file roots
- Reads outside allowed roots
- Writes outside allowed roots
- Tool rules
- Browser rules
- Network rules
Rule values
| Value | Behavior |
|---|---|
Allow | Let the agent use the capability without asking. |
Ask | Ask before the agent proceeds. |
Deny | Block the action. |
Session permission modes
New tasks also have a permission mode:| Mode | Use |
|---|---|
Read only | Let Aside inspect browser and file context without changing your files. |
Guard | Let Aside work in approved folders and ask before it accesses other folders. |
Full access | Let Aside read and write anywhere on the computer. |
Guard is the default for new tasks. Full access expands file access; it does not expose saved password values.