- Allow — go ahead, if your workspace already permits it.
- Ask me — pause so you can allow it once, allow it for one hour, or deny it. Open Approvals to decide; its badge shows waiting personal action approvals.
- Never — block it immediately.
Read-only actions are not controlled here.
How Safety combines with workspace rules
- If your app access is read-only, write tools stay hidden even if Safety says Allow.
- If a workspace guardrail blocks an action, Safety cannot override it.
- Autonomous automation credentials do not raise personal Ask me prompts. Company access may require action approvals; see Company access.