Connector Permissions Retrieval Modes

User `pat@acme.com` is in Engineering, not Finance. The deck was crawled yesterday with Drive ACLs mirrored into the Knowledge Graph. A teammate shared a public Slack link to the filename but did not grant Drive access.

Assistant runs permission-filtered search; no snippet, title, or `read_document` payload from the private deck appears. Response states the item exists in Drive for authorized colleagues or suggests requesting access — without leaking file body text.

Tenant has Notion Live Mode enabled. User completed per-user OAuth. Indexed crawl corpus is 48h stale and does not include the new paragraph. Live Mode can fetch fresh pages via user token; Notion enforces native permissions.

Assistant prefers a live Notion fetch for this query, returns only content the user can open in Notion, and attributes the source to Notion with last-edited metadata. Does not substitute another user's indexed copy.

Admin enabled classic Notion crawl with workspace integration token only (Live Mode off). Docs note crawl APIs may not project document-level ACLs into the index — content shared with the integration may be visible to all users a…

Assistant warns that results may be broader than native Notion visibility when only indexed crawl is available, recommends enabling Live Mode + user OAuth for permission-accurate answers, and does not claim per-page Notion ACL parity.