A permission level for every application an AI can reach
Gmail has four levels, Calendar two, web search is on or off. Set per application; every AI follows.
What it does
Levels that fit each application
Gmail: Read, Draft, Manage or Full. Calendar: Read or Full. Web search and page fetching: on or off. Nothing is offered that the application cannot honour.
A level decides what the AI is even shown
A Read AI is never offered send. Each level asks the provider only for the scopes it uses, so an account never grants more than the level needs.
Set a level once; every AI follows a change
Set a permission once, hang any number of AIs on it. Change the level and each follows on its next call, with nothing to restart.