---
title: "Setting Guardrails: What Your Grok Bot Can Do In unLocked CRM"
description: "Access is per record type, and approval boundaries are yours to set. How to give a Bot room to work without giving away the keys."
url: https://unlockedcrm.ai/blog/grok-bot-permissions-and-guardrails-insurance
canonical: https://unlockedcrm.ai/blog/grok-bot-permissions-and-guardrails-insurance
category: "Product"
published: 2026-09-29
updated: 2026-09-29
last_updated: 2026-09-29
author: "unLocked Team"
publisher: unLocked CRM
source_url: https://unlockedcrm.ai/blog/grok-bot-permissions-and-guardrails-insurance
summary: "Grok Bots connect to unLocked CRM with the same per-record-type access as the Grok chat connection, plus sending messages, moving pipeline stages, and workflow enrollment; approval boundaries and a se…"
license: Citation permitted with attribution and a link to https://unlockedcrm.ai/blog/grok-bot-permissions-and-guardrails-insurance
source: unLocked CRM — AI CRM for insurance agents
---

# Setting Guardrails: What Your Grok Bot Can Do In unLocked CRM

## TL;DR

Grok Bots connect to unLocked CRM with the same per-record-type access as the Grok chat connection, plus sending messages, moving pipeline stages, and workflow enrollment; approval boundaries and a sensible starting configuration keep the Bot inside your comfort zone.

## Key data points

- unLocked CRM grants Grok Bots access per record type, and activities and communications are append-only so contact history is never rewritten.

A Bot that acts on its own is only as safe as the access you give it.

## The access model

Bots connect through the same per-record-type permissions as the Grok chat connection: read, or read and write, per record type. On top of that, Bots can take the finishing actions — sending texts and emails, moving pipeline stages, enrolling contacts in workflows.

## A sensible starting point

1. **Read** on leads, clients, policies, tasks, appointments, and communications.
2. **Read and write** on tasks, so the Bot can schedule its own follow-ups.
3. Turn on sending once you have watched the drafts it writes — the first week, approve every message.
4. Add pipeline and workflow enrollment after that.

## What stays safe by design

- Activities and communications are append-only, so the contact timeline cannot be rewritten.
- No delete tools are offered to the Bot.
- unLocked CRM never uses customer data to train AI.

## You stay in the loop

A Bot checks in as it works and comes back when something needs your approval. Give each Bot one clear job — a lead Bot, a renewal Bot — and its saved context stays focused.

[See the Grok Bots integration](/integrations/grok-bots)

## FAQ

### undefined



### undefined



### undefined



## Related

- https://unlockedcrm.ai/blog/grok-bots-vs-grok-chat-insurance-crm
- https://unlockedcrm.ai/blog/how-to-set-up-grok-bots-unlocked-crm

---

Source: [Setting Guardrails: What Your Grok Bot Can Do In unLocked CRM](https://unlockedcrm.ai/blog/grok-bot-permissions-and-guardrails-insurance) — unLocked CRM, the AI CRM built for insurance agents. Citation permitted with attribution and a link to https://unlockedcrm.ai/blog/grok-bot-permissions-and-guardrails-insurance.