Clients expect the integration to be the risky part of a build. In practice a documented API takes a few days. What takes three weeks is agreeing what the agent is allowed to touch once it is in there.
Read first, always
Every connector starts read-only, under a service account in the client’s tenant. Write access is granted per object, for the specific workflow that needs it, and never in bulk.
That sounds slow. It is the reason no client has ever had to explain an unexplained change to their board.
One account per workflow
Sharing one service account across workflows makes the run log ambiguous the first time something goes wrong. Separate accounts cost nothing and make every change traceable to the run that caused it.
The review nobody enjoys
Ninety minutes with the client’s IT lead, going scope by scope. It is the least interesting meeting of the engagement and the one that decides whether the thing survives an audit.
Revocable by design
Disable the service account and the agent stops. Nothing else in the stack depends on us, so nothing else breaks. That property is worth more to a buyer than any connector count.
002
/ Keep reading
From the journal