Separate read and draft tools: Which permission design fits? | AIGP
7-day money-back guarantee — full refund within 7 days of purchase if you've completed under 20% of the questions. See pricing →
Certifications Tools Flashcards Career Paths Exam Guides Blog Pricing For Teams About

Language

✓ EnglishDeutschEspañolFrançaisPortuguês
Check readiness — free →

Separate read and draft tools: Which permission design fits?

AIGP Understanding How to Govern AI Deployment and Use Medium

Separate low-risk tools and require recorded customer confirmation before consequential transactions.

The question

A travel-support agent must search itineraries, draft changes, and execute booking changes or refunds after the customer confirms the proposed transaction. Airline cancellations and refunds have financial consequences. Internal policy requires recorded customer confirmation before any such transaction. The vendor supports separate read, draft, and transaction tools. Which permission design fits?

Preparing for AIGP? Take the free 5-min readiness quiz →

  1. Give the agent unrestricted booking and refund access.
    Unrestricted access bypasses recorded customer confirmation and grants more authority than the task requires.
  2. Separate read and draft tools; require recorded confirmation before transactions. ✓
    This provides narrow routine permissions while allowing consequential transactions only through the required confirmation gate.
  3. Limit the agent permanently to searches and drafts.
    This prevents unauthorized transactions but cannot perform the required confirmed changes or refunds.
  4. Permit transactions when confidence exceeds a threshold.
    A model confidence score is not recorded customer confirmation and does not create an authorization boundary.
The trap
Separate preparation from execution and enforce the required authorization at the transaction boundary.

How to remember it

Separate low-risk tools and require recorded customer confirmation before consequential transactions.

How many of these would you get right?

One of 1581 AIGP questions on Certsqill. Take a free five-minute check and see your score per domain — not one number, but which section to open tonight.

Test your AIGP readiness — free

More Understanding How to Govern AI Deployment and Use questions

Part of the Certsqill AIGP question bank · Understanding How to Govern AI Deployment and Use · Every answer, right and wrong, comes with its own explanation.