You grant the access
Explicitly, per system, with credentials held the way your security team expects rather than pasted into a prompt.
Browser control
Let agents carry out supported tasks in web tools, including work without a direct API connection. The same access, spending, and review rules apply.
A seat can reach the systems you named. It cannot wander onto anything else.
Same run trace, same cost line, same undo where the target system allows it.
Watch only means watch only, in a browser as much as in an API call.
The legacy portal your operation actually runs on is usually the one with no integration.
Explicitly, per system, with credentials held the way your security team expects rather than pasted into a prompt.
It does the same clicks a person would, on the systems you allowed and nothing else.
Every browser run keeps a trace of what it did, so this is not a black box clicking around your admin panel.