Approving High-Risk Actions

Use the approval card to review a delete or archive action before the AI agent applies it, even when the tool that performs the action is set to Always approved.

Required Permissions

• To use Axonius AI chat: AI Agents > View and interact
• To set a tool to Always approved: AI Agents > Configure AI system settings

How Always Approved Tools Handle High-Risk Actions

Always approved is a tool-permission level under which the agent applies a tool's changes at once, with no question in the chat and no approval card.

Axonius treats the following actions as high-risk:

When the tool that performs one of these actions is set to Always approved, the agent does not apply the high-risk action at once. An approval card appears in the chat with a preview of the change, and Axonius deletes or archives nothing until you approve. The agent does not ask "Are you sure?" in the chat first, because the approval card is the confirmation step.

The other actions of the same tools stay automatic under Always approved. For example, the agent creates or updates a custom field definition at once, with no approval card.

Approving a High-Risk Action

1. Ask the agent to delete or archive the item. For example, "Delete the custom field Owner Email."

2. Review the preview on the approval card.

   [Screenshot: approval card for deleting a custom field definition]

3. Select Approve on the approval card to apply the change. Select Decline to keep the item.

Limitations

• A Virtual Employee (a named worker with one job that you run from the chat or on a schedule) follows its own write settings instead. When a Virtual Employee's write actions are set to Live for one of these tools, the Virtual Employee applies the high-risk action without an approval card.
• Only the three actions listed in the table above use this approval card under Always approved.