Access control

Delegate to my agent

Narrow a token you already hold and hand the subset to one of your own agents. No approval — you can only subtract. employee_salary is never offered.

Fields (only what you hold; salary excluded)

Row scope (teams · ∩ with yours)

You hold (eng)

stripe/spend_by_teamquery · readgrossnetperiodteamteam ∈ {eng, ops}

Agent currently holds

stripe/spend_by_teamquery · readgrossnetperiodteamteam ∈ {eng}