How do you limit the AI's access to data?

Access is limited through identity, roles, permissions, source separation, department filters, and action authorizations. The AI shouldn't have more powerful credentials than necessary. In more sensitive systems, we add approvals, token expiration, environment segregation, and logs of queries and actions.