---
title: "Management, permissions and quality for builders"
description: "Permissions, control levels, logs and ownership: the agreements that keep a workflow you build reliable, and what we look at during review."
source_name: "Gen8"
source_url: "https://gen8.app/en/bouwers/beheer-en-kwaliteit/"
site_home: "https://gen8.app/"
source_description: "Managed AI service for SMEs. We set up, connect and manage; you stay in control."
locale: "en"
copyright: "© 2026 Gen8 VOF · Dutch Chamber of Commerce 92978789 · Delft"
published_at: "2026-09-25T09:43:15.668Z"
modified_at: "2026-10-21T20:07:16.028Z"
---

# Management, permissions and quality for builders

## What you build must still be right *tomorrow*

A workflow that works today only becomes reliable when permissions, control and management are properly arranged. You handle that, and we review it with you.

[Book an introductory meeting](<https://gen8.app/en/contact/>)[Security and data](<https://gen8.app/en/veiligheid-en-data/>)

- Permissions remain decisive
- A log of every step
- Review before production

## Three levels, chosen for each action

You choose the control level for each action rather than each project. Reading can usually happen automatically; writing to a system in a way that affects a customer requires a person.

| Level | What the workflow does | Where people are involved | When to choose this |
| --- | --- | --- | --- |
| Read only | Retrieves, summarises, flags | Reads the result | Reporting, knowledge questions, monitoring |
| Human approval | Makes a proposal with a visible change | Approves, edits or rejects | Email, CRM changes, documents, anything with consequences |
| Automatic with logging | Executes and records | Checks afterwards through the log | Small, reversible actions within one system |

## Four things to record before going live

Security is not a layer you add afterwards. It is built into what the workflow may see, what it may do itself and whether you can reconstruct what happened afterwards.

During review, we go through these four points together. How that review works is explained under [guidance](<https://gen8.app/en/bouwers/begeleiding/>).

### The user's permissions

A workflow acts on behalf of a person and inherits their permissions. What that person cannot open will not appear in an answer either.

### A log of every step

Which source was read, which proposal was made, who approved it and what was written, with a timestamp.

### Your own environment

Your organisation has an isolated environment with its own members, integrations and usage.

### Management is explicit

If a system or integration changes, someone must update the workflow. Agree who does that.

> An agent allowed to do everything is not an agent but a risk. *Its boundaries are its design*.

That is why you choose a control level for each action rather than each project, and deliberately keep approval in place longer for a new integration.

## Frequently asked questions about management and quality

Who is responsible if a workflow makes a wrong proposal?

The person who approves it. That is why approval is visibly built in and every proposal is logged with a source reference.

Can a colleague use a workflow to access documents they are not allowed to see?

No. The workflow inherits the permissions of the user it acts for. If permissions in the source system are too broad, a workflow does not fix that; it is a finding for your administrator.

What happens if I stop?

Access is revoked and you keep what belongs to you: your data, documents and process description. Record that before going into production.

## Put your strictest requirement on the table.

Tell us in an introductory meeting which rules apply in your organisation. We explain upfront what is possible within them and how we guide you as you build.

[Book an introductory meeting](<https://gen8.app/en/contact/>)[All building topics](<https://gen8.app/en/bouwers/>)

- Response within one business day
- Starts with a conversation