From Dev.to
Letting an AI assistant act on business records without giving it more power than the user
Adding an AI assistant to business software comes with an obvious temptation. You give it a service account, let it call your APIs, and it can "do things": approve a leave request, mark an invoice pai...