What this means in practice
The agent can inspect managed databases and connected storage that you have made available, while changing or removing data remains behind an approval step.
Check the requested action before approving it.
Practical guidance
Access answers what the agent can inspect; approval answers what it may change. Those are separate safeguards. Managed databases and connected storage can provide context for a task, but that read access does not silently grant permission to alter or remove stored information. A requested write or deletion is surfaced for your approval.
When an approval appears, check the target resource and the exact operation. For a database, verify which collection, table, or records are affected. For connected storage, check the object or path. If the request is broader than the task requires, decline it and ask for a narrower action. This review keeps the agent useful for investigation while leaving consequential changes under your control.