Signing in and what your role allows

Why

An assistant should carry your permissions, not a set of its own.

How

Sign in to Kabaido when Claude asks, review what you are granting and allow it.

Signing in

1. 1
   Step 1.

   When you connect, Claude opens Kabaido in your browser. If you are not signed in, sign in with your Kabaido email and password.

2. 2
   Step 2.

   Kabaido shows who you are signed in as, what is asking to connect, where you will be returned to and the workspace it will connect to. If you belong to more than one workspace, choose which.

3. 3
   Step 3.

   Under Allowed scopes are the permissions your role allows, each with a tick. Untick one if you want Claude to have less than your role.

4. 4
   Step 4.

   Choose Allow access. You return to Claude connected. Deny connects nothing.

Kabaido never sees your Claude password and Claude never sees your Kabaido password.

Only a workspace you may enter is offered. A workspace that is not open cannot be connected. A connection to one that closes later is refused.

What your role allows

You can grant Claude at most what your own role allows. The ceiling by role:

Reading everything else covers designs, quotes, orders, customers, the catalogue, wizards, suppliers, purchase orders and the store. Users and roles says what each role is.

What is checked each time

Every action is checked again at the moment Claude asks for it, before anything is read:

1. The connection carries the permission the action needs. If not, Kabaido refuses and names the permission.
2. The part the action belongs to is switched on for your workspace. If not, Kabaido says the part is not switched on.
3. The connection is within its call limit. If not, Kabaido says how many seconds to wait. Nothing is changed.

Claude tells you what was refused and why.

If your role changes

The connection holds what you granted on the day you connected. After a change of role, disconnect and connect again so that what Claude holds matches your new role.

The record

Each thing Claude does through the connector is recorded in your workspace with the name of the person whose Claude did it, what was asked and whether it worked. File contents and message text are not kept in the record.

In a workspace set up on the round tool engine, the Claude section of Settings lists the record: the work, what was refused or everything. Missing today: no screen lists it in other workspaces.