Every member reads every connected tool

Connecting a tool now makes it useful to your whole team straight away. See Permissions.

Reads by default. Every member can use the capabilities of a connected tool that only read, such as a log search or a deploy list, without a grant. An admin can still take that away for someone. Agents and service keys still hold nothing until you grant it.

Changes come in packs. Each connection brings its own built-in packs, one for its reads and one for its changes, such as Northflank: changes. Give someone the changes pack and they can use everything on that connection that changes something, with your approval rules still applying. Firefight keeps the built-in packs in step as tools come and go.

New tools arrive switched on. A newly connected tool, and a capability a tool adds later, arrive switched on, reads and changes alike. Being switched on is not permission, and anything you switch off stays off for everyone.

Ask an admin. When Halon is refused a change for want of a pack, it names the pack and your admins, with Ask an admin. Pressing it sends each admin a direct message in Slack with Give pack, and the request waits at the top of the Permissions screen under Waiting for a pack. Each admin hears about a pack from you at most once a day.