Play / The map / The capabilities / Act in accounts with the credentials it holds
Act in accounts with the credentials it holds
authenticate-as.credential.tenant — authenticate-as × credential at tenant reach (the organisation's accounts, repositories and services). Family: identity. Effect: cannot be undone.
Granted by 7 of 9
| Profile | Control on the path | Evidence | Via |
|---|---|---|---|
| Claude Code — web container | ○ boundary | self-reported | shell (Bash), harness (MCP and built-in tools) |
| Claude Code — local · confirm off | ● none | derived | shell (Bash) |
| Claude Code — local · confirm on | ● none | derived | shell (Bash) |
| Claude Desktop — local tools | ● none | derived | local files and commands (when enabled) |
| Claude.ai — connectors on | ○ boundary | derived | connectors |
| Browser extension — all sites | ◐ setting | documented | the extension |
| Scheduled job — service account | ● none | derived | the job |
What narrows it
The setting: scoped, short-lived tokens issued to the agent rather than your own; read-only where read is all it needs
What it costs: an hour per service, and rotation
Tier after: boundary
Questions that ask about it
- Have you connected it to a drive, your mail, a code host or a cloud account? — eliciting, reliability 0.8
- Does it act inside websites you are logged into? — eliciting, reliability 0.55
In the mandates
- wanted by A scheduled job under a service account
- not wanted by A coding assistant on my machine
- not wanted by The desktop app, with local tools switched on
- not wanted by Chat in the browser, nothing connected
- not wanted by A browser extension I installed