Glossary
PBAC
PBAC (purpose-based access control) grants access for a stated purpose and time, rather than standing privileges that linger. For agents, it means a triage bot may read inbox fields for classification but not export the whole CRM. Platforms enforce; you design the policy and the evidence.
Why it matters to your operation
Purpose beats standing access when agents multiply faster than reviews.