In development4 min read
Integration boundaries and permissions
Design external connections with least privilege and clear data scope.
This is a product-direction guide. Described features may not be available yet.
Overview
Design external connections with least privilege and clear data scope.
Step-by-step
- Define which business-owned account is connected.
- Request only the scopes needed for the feature.
- Store secrets in approved server-side locations.
- Provide clear disconnection and reauthorization behavior.
Important checks
- Never expose API credentials in browser code or documentation.
- A connected state needs functional verification.