Scopes and websites for an AI assistant

What each permission lets an assistant do, how to limit it to some of your websites, and how your own role sets the ceiling.

2 min read

When you make a token or connect an app, you choose what it may do (its scopes), which websites it may reach, and how long it lasts.

Scopes

  • Read: experiments, results, surveys, learnings and website settings.
  • Build experiments: create and edit Draft and QA experiments with their variants and weights, and write the debrief of an ended one. Running experiments stay as they are.
  • Start and stop experiments: start, end, archive and schedule experiments, and switch QA on and off.
  • Deploy winners: deploy a winning variant to every visitor.
  • Build surveys: create surveys, and edit draft surveys with their questions and targeting. Running surveys stay as they are.
  • Start and stop surveys: start, end and archive surveys.
  • Publish websites: rebuild and publish a website's experiment script.

Choose only what the job needs. To ask about results, Read is enough.

Keep Read ticked whenever you choose another scope. An assistant reads an experiment or survey before it changes it, so the other scopes only work alongside Read.

Starting, ending and deploying publish the website, as they do when you click them in the dashboard. A publish ships everything set on the website at that moment, so in practice those scopes reach as far as Publish websites.

Websites

You choose Every website you work on, or Only the websites I pick.

  • Every website you work on includes websites you get access to later.
  • Only the websites I pick is fixed to the ones you ticked, even if you used Select all. To reach a new website, make a new token or connect the app again.

To the assistant, a website outside its list does not exist.

Your role is the ceiling

An assistant can never do more than you can do yourself. A Member, whose role is read only, can only choose Read. An account without an active plan can read but not make changes, whatever scopes are chosen.

How long it lasts

A personal token lasts 7, 30, 90, 180 days or a year; 90 days is the default. A connected app lasts as long as you chose on the consent screen, and keeps itself signed in until then.