---
title: "Permissions & control"
description: "Understand macOS access and the separate permissions used by an Agent."
locale: "en"
canonical: "https://orylo.io/en/docs/permissions"
product_status: "in-development"
last_reviewed: "2026-10-12"
---
# Permissions & control
Understand macOS access and the separate permissions used by an Agent.
## Grant system access when needed
Use System Settings → Privacy & Security to review or change access. Orylo reads the real macOS authorization state; it does not bypass system permissions.
| Permission | Why it is needed |
| --- | --- |
| Accessibility | Read the current selection for enabled context features and supported actions. |
| Microphone | Record voice drafts or spoken input. |
| Screen Recording | Capture screen regions or windows where macOS requires it. |
## Review Agent tool requests separately
An Agent can request permission to use tools, commands, directories, or hosts. Read the requested operation and choose a suitable scope: once, this session, always, or deny when those choices are offered.
Session permission is not shared across Team members. In the current implementation, the cross-conversation “always” grant is cleared when Orylo quits. Required input forms still need to be completed each time.
## Recover after changing a permission
1. **Check the exact permission** — Open the relevant Privacy & Security section and enable Orylo if you want that feature to work.
2. **Return to the source** — Select the text, focus the window, or open the Composer again. Do not assume a previous failed capture was retained.
3. **Retry the action** — Run the operation again. Some system changes require restarting the app. Managed-device restrictions may need help from your administrator.
## Continue exploring
- [Privacy & data](https://orylo.io/en/docs/privacy-security)
- [Context-aware Orylo Actions](https://orylo.io/en/docs/actions)
- [Troubleshooting](https://orylo.io/en/docs/troubleshooting)
- [Orylo Computer Use](https://orylo.io/en/docs/computer-use)