A manager worries that connecting a document store to Claude will expose files their team cannot normally open. What actually governs access?

Why this is the answer

Connectors inherit each user's existing access: Anthropic states that if someone cannot reach a file, channel or record in the source system, the connector cannot reach it from Claude either. There is no privileged account reading everything and filtering later, plan tier governs features rather than file permissions, and tool access modes decide which connectors load rather than what they may see.