Skip to main content

​
Set agent permissions

Agent permissions control what an agent can read, write, browse, fetch, and run.

​
Agent permissions

Open Agent Settings > Permissions. Permission areas include:
  • Sandbox
  • Readable file roots
  • Writable file roots
  • Reads outside allowed roots
  • Writes outside allowed roots
  • Tool rules
  • Browser rules
  • Network rules

​
Rule values

Deny takes precedence over ask and allow.

​
Session permission modes

New tasks also have a permission mode: Guard is the default for new tasks. Full access expands file access; it does not expose saved password values.

​
Password boundaries

Aside can sign in through autofill with its password manager. Saved password values stay hidden from the AI agent. Aside checks password access policy and the target URL before it builds an autofill payload. See Use Password Manager.

​
Agent-level and session-level rules

Agent-level permissions live in the agent settings. Session-level permissions live on each task. When a task has its own permission settings, Aside applies those task settings on top of the agent defaults.