# AI Agent Permission Matrix Template

> Source: https://netray.co/tools/ai-agent-permission-matrix-template
> Publisher: Netray (netray.co), AI and integration engineering for ERP and manufacturing systems.
> Section: Free Tools

## Short answer

Document read and write scope, spend limits and approvers for every AI agent that touches your ERP, then export to Excel.

## Category

ai-automation

## Audience

- CIO
- IT security
- ERP administrator

## Tool

**Kind:** worksheet

**Mode:** editable

**Currency:** $

**Columns:**

#### Agent

**Key:** agent

**Type:** text

#### System

**Key:** system

**Type:** select

**Options:**

- ERP
- MES
- PLM
- Document store
- Email
- Ticketing
- BI

#### Read level (0-3)

**Key:** read_level

**Type:** number

**Help:** 0 none, 1 own records, 2 department, 3 all company data

#### Write level (0-3)

**Key:** write_level

**Type:** number

**Help:** 0 none, 1 draft only, 2 write after human approval, 3 autonomous

#### Transaction limit

**Key:** limit

**Type:** number

**Format:** currency

**Help:** Highest value the agent may propose or post per transaction

#### Exposure score (0-9)

**Key:** exposure

**Type:** number

**Expr:** read_level + write_level * 2

**Format:** integer

#### Approver role

**Key:** approver

**Type:** text

#### Kill switch tested

**Key:** kill

**Type:** select

**Options:**

- Yes
- No
- Planned

#### Access review

**Key:** review

**Type:** select

**Options:**

- Monthly
- Quarterly
- Semi-annual
- Annual

**Rows:**

**Agent:** ERP Q&A assistant

**System:** ERP

**Read level:** 2

**Write level:** 0

**Limit:** 0

**Approver:** None (read only)

**Kill:** Yes

**Review:** Quarterly

**Agent:** Supplier chase drafter

**System:** Email

**Read level:** 2

**Write level:** 1

**Limit:** 0

**Approver:** Buyer

**Kill:** Yes

**Review:** Quarterly

**Agent:** PO change proposer

**System:** ERP

**Read level:** 2

**Write level:** 2

**Limit:** 5000

**Approver:** Purchasing manager

**Kill:** Planned

**Review:** Monthly

**Agent:** Document search agent

**System:** Document store

**Read level:** 3

**Write level:** 0

**Limit:** 0

**Approver:** None (read only)

**Kill:** Yes

**Review:** Semi-annual

**Agent:** IT ticket triage

**System:** Ticketing

**Read level:** 1

**Write level:** 3

**Limit:** 0

**Approver:** IT service owner

**Kill:** No

**Review:** Annual

**Totals:**

#### Highest exposure score

**Key:** exposure

**Agg:** max

**Format:** integer

#### Average exposure score

**Key:** exposure

**Agg:** avg

**Format:** decimal

#### Agents listed

**Key:** agent

**Agg:** count

**Format:** integer

**Notes:** Exposure score = read level + 2 x write level, so autonomous writes weigh most. Any agent scoring 6 or more should have a named approver, a tested kill switch and monthly access review. Give each agent its own service account in the ERP, never a shared user or a real employee login.

## Content

**Intro:** An AI agent with a service account and no written permissions is the 2020s version of a shared admin login. This matrix gives each agent a defined scope, a spending limit and a human who is accountable.

**Sections:**

#### How to use the matrix

**Body:** Add one row per agent and per system it touches, because an agent that reads the ERP and sends email has two different risk profiles. Fill the read and write levels from the lowest access that still lets the use case work. Record the approver role, meaning the person whose approval is needed before a write takes effect. Then match the matrix to real ERP roles and service accounts, and review it on the cadence in the last column.

#### The principles behind it

**Body:** The matrix applies least privilege and separation of duties. An agent that proposes a purchase order change should not be the same identity that approves it. Read access should follow the ERP role of the person using the agent, so a planner cannot extract payroll through a chat window. Write access should default to draft or approval, with autonomy limited to low-value, reversible actions. Log every action with the agent identity, the prompt and the resulting transaction.

**Bullets:**

- One service account per agent, no shared credentials
- Per-transaction and per-day value limits
- Human approval for anything that posts to the ledger or changes master data
- Tested kill switch that disables the account and queued actions

#### Reading the exposure score

**Body:** The exposure score runs from 0 to 9. Read only assistants score 3 or less, even with company-wide read, because they cannot change anything. A purchase order proposer with approval scores 6. An autonomous agent with company-wide read scores 9 and should be rare. Use the score to decide review frequency: monthly for 6 and above, quarterly for 3 to 5, and annual for the rest.

#### Common mistakes

**Body:** Teams often grant an agent the same role as its sponsor for convenience, which gives it far more reach than needed. Another mistake is leaving the transaction limit blank: an empty limit means unlimited. Also remember indirect access. An agent that can read documents may expose files the user could not open themselves unless retrieval respects document permissions. Test with a low-privilege user before go-live.

**Cta:** If you want agents that inherit ERP roles, show the query behind each answer and keep writes behind approval, we can review your matrix against how your ERP security is configured.

**Faq:**

#### Do I need a matrix for read-only assistants?

**Answer:** Yes, a short one. Read-only still exposes data, and the main control is that results respect the asking user's ERP role. Record the scope, the data classes covered and the review cadence.

#### What is a sensible transaction limit?

**Answer:** Start at or below the lowest approval threshold in your procurement policy, and raise it only after reviewing logged actions. Many teams begin with zero for autonomous writes and use approval for everything.

#### How is this different from ERP roles?

**Answer:** ERP roles control human users. The matrix documents the agent's identity, its scope, who approves its actions and how it is disabled. The two should align, and the matrix is the evidence an auditor will ask for.

#### How often should I review it?

**Answer:** Monthly for agents that can write, quarterly for read access across departments, and annually for narrow read-only tools. Also review whenever an agent gains a new tool or data source.

## Search terms

ai agent permission matrix, ai agent access control template, ai agent least privilege erp, agent authorization matrix excel, llm agent roles and permissions, ai agent approval limits, ai agent raci template, erp ai agent security

---
Talk to an engineer: https://netray.co/contact?intent=erp_ai | Machine catalog: https://netray.co/agent/catalog.json