This document outlines the recommended least privilege access settings necessary for integrating ConnectWise PSA with Hatz AI. The purpose of this guide is to provide detailed instructions on configuring the integration securely while reducing the risk of unauthorized access and data breaches.

For detailed steps on authenticating your ConnectWise PSA account, please refer to the ConnectWise Manage + Hatz AI Integration Guide (For MSPs).

To successfully authenticate the ConnectWise PSA integration with Hatz AI and retrieve the list of companies you intend to associate, the following permission scopes are essential:

In addition to the authentication requirements mentioned above, the ConnectWise integration with Hatz AI also supports a range of other actions. To enable all available features, ensure that the following additional Security Roles are configured for the associated account:

Run through this table to see what policies you need to enable for the security role.
​
​Important Note: Enabling all of these options will be highly permissive and allows the tool to take a lot of actions. If you wish to prevent the tool from performing destructive actions or editing specific things, simply do not allow those permissions. If the permissions are disabled and the tool attempts to perform such actions, the AI will be notified in the tool response that it does not have access to perform such actions.