Connected accounts

Per-user delegated access — your agents can never see more than you can. Disconnecting revokes the agent's access instantly.

Other providers — development stub

These seed a placeholder connection row so the approval and audit path can be exercised end to end. They are not the real OAuth flow, and they only work where dev login is enabled — on production they will fail, by design. Genuine per-user OAuth lands with the IT app registrations.