fine-grained agent permissions