Skip to main content

C · The BASIC Stack

Control what Perplexity can read and change

An event recap needs approved notes. Review connected tools before giving Computer the job: it can act through other services. Back your request for a draft with the available permission controls.

Product documentation checked . Account settings and availability can differ.

See the permission settings

Which product and account does this cover?

Chat, Projects, cloud Computer, and Microsoft 365 connector controls. Review local Personal Computer device permissions separately.

Chat and Projects
Projects organize shared files, sessions, and Computer work. Personal projects are invitation-only; Enterprise adds organization sharing.
Computer
Available on paid plans, with limited trial turns on some free accounts. Runs tasks asynchronously; access varies by feature.
Microsoft 365 connector
Pro, Max, Enterprise Pro, and Enterprise Max on desktop web. Not supported in Perplexity desktop or mobile apps; Enterprise administrators can restrict access.

What the permission settings mean

Microsoft 365 writes
Set or check: Plugins → Installed → Microsoft 365 → Tools → Write / delete tools → Disable
Limit: Check individual overrides. Disabling tools does not narrow Microsoft authorization.
Microsoft 365 reads
Set or check: On the same page, set Read-only tools to Always ask
Limit: Allow skips confirmation; Disable blocks calls. Admin rules can lock tools.
Project membership
Set or check: Open Share or the member list at the project's top right
Limit: Viewers read shared files and sessions. Editors change project content and settings.

Know whether you are reading a source or a copy

Keep the practice Project private. Inspect Project settings → Context, or Sources → Files in the newer layout. Connector-added files are copies: source changes and deletions do not update them. Fetch the latest version or replace the copy.

Review membership before adding information collaborators should not see.

Set tool permissions before running Computer

Find Microsoft 365 in Plugins, select Connect, and review its authorization, which includes writes within your Microsoft permissions. Apply the controls above. Individual tool settings override group defaults.

Ask requires @Microsoft 365; Computer can select it automatically. Neither the mention nor a 'read only' prompt restricts account permissions.

Other connectors have different tools. Inspect their installed pages; do not assume they expose the same read/write grouping. Enterprise role restrictions can make a connector unavailable.

Manage memory without confusing it with training

Settings → Memory separates Use search history, Notes, and Manage memories. Turning a feature off does not erase saved memories; inspect and delete entries separately. Also review shared Project Brain before changing membership.

For personal Free, Pro, and Max accounts, Settings → Preferences → AI data retention controls training use and starts enabled. Turning it off applies prospectively; it does not remove earlier training data or stop service processing. Enterprise data is excluded from training. None of these settings disables a connected tool.

Inspect active work and scheduled work separately

Review the Computer session as it runs and inspect its output in the destination service. Running subagents have a stop control; you can also give a follow-up instruction mid-task. Check other active work instead of assuming stopping one helper ends everything.

For recurring tasks, open Computer's Automations dashboard, then the task's Actions → Pause. Confirm the row says Paused and inspect recent run history. Closing the browser does not stop cloud schedules.

All settings → Analytics shows connector, skill, artifact, and task usage. Its reporting can lag, so use the task session and destination service for immediate verification.

Disconnect the connector, then review retained material

Plugins → Installed → connector → Disconnect removes that connection everywhere Perplexity uses it. Uninstalling a plugin alone leaves its connectors connected. Disabling a skill is also different from disconnecting its tools.

Inspect retained Projects, sessions, and downloaded outputs separately. Copied files survive disconnection. Remove unnecessary access and copies according to organization policy. Completed external edits or messages need attention in their destination service.

Practice with fictional material

Read one approved file and leave the source untouched

Use disposable event notes in OneDrive or SharePoint with a unique check value. Record contents, version, and sharing. Leave unrelated services disconnected.

  1. Apply the controls above, inspect individual overrides, and start a fresh session.
  2. Ask: @Microsoft 365 Read [exact file]. Draft a 150-word event recap here with three takeaways and its check value. Flag missing facts. Do not edit, send, publish, share, or schedule anything.
  3. Approve only the intended read request. If an unexpected action appears, decline it and inspect the running work.
  4. Open the actual source in Microsoft 365. Compare its version, contents, and sharing. Inspect the session for unexpected artifacts or actions; keep the recap and test observations.

Check the evidence

  • The citation opens the intended file, and the check value matches it.
  • The original file and sharing are unchanged. A claim in the generated answer is not sufficient evidence.
  • Check permission settings and unexpected automations. Record any denial actually shown in the interface.
Save the results in your permission record

Common questions

Does a skill grant account access?

A skill supplies reusable instructions. Review the connected tools it can call and their permissions separately.

Why does my Project still show an old file?

Its connector-added file is a copy. Fetch the current source or replace the copy; disconnecting the source does not refresh it.

Official sources

These instructions were checked against product documentation on October 31, 2026. The practice exercise is a suggested test for your own permitted workspace, not a claim that these controls were configured in your account.

Keep the whole workflow in view.

Return to Controls in the BASIC Stack

The manual is free

Build a system you can put to work.

Get the free AIOS book and practical guidance through The AI Enterprise.

Free. No credit card. Includes The AI Enterprise newsletter. Your download is yours to keep, and you can unsubscribe anytime.