Distinguish read-only tools from tools that change data
Distinguish read-only tools from tools that change data in Cortex Chat: practical steps, setting explanations, result checks and troubleshooting.
Each tool description identifies whether it is Read only or Can make changes. A write-capable tool may create a record, send information or alter access depending on its purpose; the label should be read alongside the description.
Before you start
Effective tool access depends on the connected account, workspace authority, the owner’s approval ceiling and the Sidekick’s saved context-specific policy. These settings are deliberately separate. A checkbox can represent an unsaved choice, while the running assistant may still be using its previously saved tools until refresh. Review the description and read/write annotation rather than granting everything in response to one error. Private and group policies can differ even for the same assistant. If the interface reports owner approval needed, follow its exact account/context/application guidance. Restarting cannot manufacture missing approval and can affect the Sidekick in other conversations.
Step-by-step
- Expand the application and category for the intended operation.
- Read the tool label, description and read/write annotation.
- Select only the operations appropriate to the task and existing user authority.
What the settings mean
| Control or state | Meaning |
|---|---|
| Owner ceiling | The maximum tools an administrator may delegate. |
| Saved policy | The actual operations selected for this Sidekick/context. |
| Unsaved selection | Draft choices that have not yet taken effect. |
| Runtime refresh | How the running assistant receives a saved policy change. |
Check the result
The saved set supports the intended task without unrelated write access.
If it does not work
Read-only account access can still prevent a write tool from being granted. Inspect the account-level setting rather than assuming a checked UI row overrides it.
Continue with the right context
Return to the Cortex Chat guide index to choose another task. Keep the current account, assistant and conversation in view when following the next guide. To use the product, open Cortex Chat.
- Review a Sidekick’s tool permissions
- Search tools by operation or category
- Select and save tool permissions
Last updated