How to plan limited access for a business integration

BUSINESS INTEGRATION ACCESS AGREEMENT
One-sentence job:
Business owner / technical operator:
Provider / environment / integration identity:
Allowed accounts, workspaces and record sets:
Allowed fields and actions:
Forbidden resources and actions:
Exact provider permissions / documentation reference:
Unsupported limits / alternative / owner decision:
Safe stored-connection reference (no secret values):
Access expiry / review date / stop-access owner:
Revocation route / expected delay / verification:
Synthetic test records / approved test environment:
Check / expected result / actual result / evidence:
Blocked-work message / escalation owner:

BEFORE REAL DATA
[ ] The agreed read and draft actions work.
[ ] Excluded resources and actions are refused.
[ ] The destination enforces the draft boundary.
[ ] Permission gaps and unknown checks are visible.
[ ] The owner knows how to stop access.

ZenOut Labs | https://zenoutlabs.com/guides/least-access-business-integrations/