You just give them the permissions they need to do their work.
This approach exploits the fact that managing permissions for humans is a very old requirement and most platforms have good support for it already. You can then issue API keys from the agent's accounts if you want to restrict permissions further.
You just give them the permissions they need to do their work.
This approach exploits the fact that managing permissions for humans is a very old requirement and most platforms have good support for it already. You can then issue API keys from the agent's accounts if you want to restrict permissions further.