Approvals, least privilege, guardrails, audit logs and incident response — how to grant real authority without losing control of it.