Connect the Right Account With the Right Access
Use the intended account and the access needed for the actual task.
Look around. Try a small click.
This lesson works as a written guide with interactive examples. You can explore here before opening the real application or provider dashboard. A recorded video has not been added yet.
What will make more sense
- Use the intended account and the access needed for the actual task.
- The source and access should match the limited practice lookup.
- Connections can use documented browser sign-in or other supported credential methods.
One idea to keep
Use the intended account and the access needed for the actual task.
The short lesson
Read the explanation at your pace
A business connection needs to know which account it is using and what that account may do. Authentication establishes identity. Authorization concerns the access that identity receives. You do not need to remember the technical distinction perfectly, but you should recognize its practical meaning: signing in and being allowed to perform a particular action are related questions, not the same question.
Our account-cards.md shows Willow Catering's fictional practice calendar and its live booking calendar. The labels look similar. The owner wants to inspect a sample appointment in the practice account, so the selected account matters. A successful sign-in to the wrong calendar would still be the wrong destination. Confirm the recognizable account or workspace before treating the connection as ready.
Authentication methods vary. Some connections use a browser sign-in and consent flow. Some use an API key or another supported credential. Protected remote MCP connections can use an OAuth-based authorization flow, while local server arrangements may manage credentials differently. This course does not ask you to configure any of them. Use the actual provider's supported process when setting up a real service.
Do not put credentials in an ordinary chat message, a public page or the course notes. Use the provider's documented sign-in or secure credential mechanism. A technical helper can explain where that mechanism is without asking you to publish a secret. If your organization manages the account, its administrator may need to approve the connection or choose an appropriate role.
Choose access that matches the work. A lookup task may need read access to a particular source rather than permission to modify or delete records. This is often called least privilege: give a workflow the access it needs, with a sensible scope. The provider's actual permission options may be broader or narrower, so review the available choices instead of assuming every connector has identical controls.
The activity asks which account and access fit a practice lookup. Choose the practice source with suitable reading capability. You are not being asked to sign in or change a permission. The exercise teaches a clear business decision: connect the intended identity to the intended source, understand the offered access and avoid treating a successful sign-in as permission for every possible action.
Try it here
Choose the next small step
Follow the prepared example, then select a response to see why it fits. Nothing is connected or changed.
This is a local learning example with prepared responses. It does not run VS Code or contact an AI service.
You are inspecting a fictional practice booking. Which setup fits?
A prompt you can keep
These are example words to copy into your own AI chat when you want to try them. Copying does not send a request.
Read the prepared example for this lesson. Explain the proposed action, its target and the expected result. Keep this as an explanation; do not change files or connect accounts.A tiny next step, if you want one
Optional: try 2 small actions at your own pace
You can finish this lesson by exploring the example above. These real-app actions are optional, and there is nothing to submit.
- Optional: read account-cards.md and identify the practice source.
- Optional: inspect a provider’s official connection instructions without entering credentials.
A quick confidence check
These checkmarks are a personal reminder. Choose what feels familiar, and come back whenever you want.
Your place is saved in this browser when storage is available. There is no grading or account sync.
Try a short question
Choose an answer to see why it fits. You can try again or explore every explanation.
You are inspecting a fictional practice booking. Which setup fits?
Are API keys the only way a connector can authenticate?
If something looks different
My assistant or VS Code uses a different label.
Use the official help for your selected assistant and version. The course teaches the decision; the exact menu or capability can differ.
I do not have the account or feature used in the example.
Use the prepared browser example and downloaded notes. No account connection or paid service is required to complete this course.
Sources and further help
Read the official product guidance and related learning resources when you need them. You do not need to read every reference now.