Connector Access for Teams Using AI Agents

Connector access by department. Give each team the actions it needs.

Pick the actions in each team's connector profile, and their agents can call only those.

Employee records

Workday

Shared withPeople Operations

Each person connects their own account

Profile actions

Try the toggles

AllReadWrite

Search Workers Find workers by name or employee ID Read Get Worker Retrieve staffing details for a worker by Workday ID Read Update Time Off Request Correct or delete a worker's existing time off entries Write

Claude Code

Alex MorganPeople operations director

Available tools

2

Search Workers
Get Worker
Update Time Off Request

Alex's Workday connectionUsing the Employee records profile

Accounts payable

NetSuite

Shared withFinance

Uses the team's shared service account

Profile actions

Try the toggles

AllReadWrite

List Vendor Bills Retrieve a paginated list of vendor bills Read Get Vendor Bill Retrieve a single vendor bill by its internal ID Read Create Vendor Payment Pay outstanding vendor bills Write

Claude Code

Lena OrtizFinance manager

Available tools

2

List Vendor Bills
Get Vendor Bill
Create Vendor Payment

Shared NetSuite service accountUsing the Accounts payable profile

Device support

Jamf Pro

Shared withIT Support

Each person connects their own account

Profile actions

Try the toggles

AllReadExecute

Get Computers Retrieve a paginated list of computer inventory records Read Get Computer Retrieve a single computer by its Jamf Pro ID Read Get Mobile Devices Retrieve a paginated list of mobile devices enrolled in Jamf Pro Read Erase Mobile Device Queue a remote wipe MDM command for a mobile device Execute

Claude Code

Noah PatelIT support engineer

Available tools

3

Get Computers
Get Computer
Get Mobile Devices
Erase Mobile Device

Noah's Jamf Pro connectionUsing the Device support profile

Pipeline

Salesforce

Shared withSales

Each person connects their own account

Profile actions

Try the toggles

AllReadWriteDelete

Search Opportunities Search Opportunity records by a search term Read Update Opportunity Update fields on an existing Opportunity record Write Delete Opportunity Move an Opportunity record to the Recycle Bin Delete

Claude Code

Jordan BlakeAccount executive

Available tools

2

Search Opportunities
Update Opportunity
Delete Opportunity

Jordan's Salesforce connectionUsing the Pipeline profile

Connector Profile Access. Choose who connects through each profile.

On the Team and Enterprise plans, restrict a connector profile so only the people and groups you grant can link accounts through it.

Read the Connector Profile Access docs

Connector Profile Member
Links accounts through the profile.
Connector Profile Admin
Also edits the profile and manages who has access to it.

Connector access case study. Nine business systems connected inside two weeks, with access granted per linked account.

Medical research laboratory — Customer story **US medical research organisation** 200 staff, running IT, finance and HR systems

Connect a service account once, then share it with the users and groups who need it. Nobody has to connect their own login.

Member
Runs the actions the account allows, through their agent.
Admin
Can also manage the account.

People Operations

Workday · Connected account

Access to this connection
User or group	Account role
People OperationsGroup	Member
Alex MorganIndividual	Admin

Tool Policies for AI agents. Control what agents can read or change.

Apply policies to users and groups to restrict actions and mask sensitive data.

Explore Tool Policies

What's Taylor Brooks' personal email?

Tool call

Get Worker 200 OK

{
  "name": "Taylor Brooks",
  "job_title": "Supplier data admin",
  "department": "Supplier Admins",
  "personal_email": "[masked]",
  "date_of_birth": "[masked]"
}

Protect personal data masked 2 fields before the response reached the agent. Enforce

I can see Taylor's job title and department, but their personal email is masked by your organization's policy.

Project boundaries and data residency. Separate teams and customers with projects.

Each project holds its own connected accounts, credentials and members, and runs in the region you choose.

Explore Deployment

Northwind Organization

EU Operations

IrelandAWS
Connected accounts
Members
- Alex Morgan
- Lena Ortiz
- Noah Patel
API keys and logs

This project only
US Sales

Northern VirginiaAWS
Connected accounts
Members
- Jordan Blake
- Maya Chen
API keys and logs

This project only
Procurement

BelgiumGoogle Cloud
Connected accounts
Members
- Priya Shah
- Taylor Brooks
API keys and logs

This project only

Connected accounts, API keys and logs stay inside their project.

Connector Access · Team access to business systems. Give teams access to business systems through AI agents.

Connector access by department. Give each team the actions it needs.

Connector Profile Access. Choose who connects through each profile.

Connector access case study. Nine business systems connected inside two weeks, with access granted per linked account.

Tool Policies for AI agents. Control what agents can read or change.

Project boundaries and data residency. Separate teams and customers with projects.

FAQ. Questions about connector access

Set up access for your teams.

Connector Access · Team access to business systems. Give teams access to business systems through AI agents.

Connector access by department. Give each team the actions it needs.

Connector Profile Access. Choose who connects through each profile.

Connector access case study. Nine business systems connected inside two weeks, with access granted per linked account.

Shared connected accounts. Share a connected account with the people who need it.

Tool Policies for AI agents. Control what agents can read or change.

Project boundaries and data residency. Separate teams and customers with projects.

FAQ. Questions about connector access

What is a StackOne connector profile?

What is the difference between connector profile access and account access in StackOne?

Who can use a connected account in StackOne?

Can a StackOne project admin use every account in the project?

What happens when StackOne updates a connector?

Can I limit who connects through a StackOne connector profile?

Which StackOne plans include these access controls?

Set up access for your teams.