An agent that can read your inbox and act in other apps needs more care than a chatbot. Singapore’s CSA, GovTech and IMDA recommend narrowly scoped access, limited permissions and clear approval controls in their November 6 advisory.
Before connecting another account
- Name the task. Which account or folder does it actually need?
- Start with read-only access where that is enough. Add write access only for the work you intend to delegate.
- Use application settings to control permissions. A sentence in a chat is not a substitute for an enforced access limit.
- Require approval for consequential actions, and review exactly what a standing approval covers.
- Find the activity history and the disconnect controls before starting. Review and remove access you no longer need.
The advisory also warns that malicious instructions can arrive inside ordinary web pages, messages and documents. Reducing what an agent can access limits what an unexpected action can affect.
GO TO THE SOURCE
Singapore CSA joint advisory · November 6, 2026 ↗Based on the linked primary source. Practical checklist items are editorial guidance, not claims of guaranteed results.