Your existing access sets the limit
An AI connection operates for one FIRCY user in their organisation. It can only use permissions that the user currently holds and has approved. It cannot borrow another user’s access or gain administrator rights.
The default selection covers your organisation’s security activity and investigation context, plus IP and network intelligence. Additional read access is offered only when your account is allowed to use it, and you choose whether to approve it.
The integration retrieves information. It does not create deployments, change configuration, manage users, or perform response actions. Information returned to an AI app is handled under that provider’s terms and your organisation’s arrangements.
Persistent access
With “Stay connected after signing out” selected, the app renews short-lived access automatically. A connection expires after a period without successful renewal and after a fixed maximum lifetime, whichever comes first. Background renewal by your app counts as activity. The consent page states the limits, and the connection check in your app shows the expiry date.
Signing out of the portal or allowing its browser session to expire does not disconnect the app. Disconnecting in FIRCY, using “log out everywhere”, losing organisation access, or an account-security change such as a new password can end access sooner. Changed permissions may require you to reconnect and approve access again.
Without persistent access, the connection works only briefly and cannot renew.
Organisation controls
Organisation administrators can see and revoke organisation connections or disable AI connections. Disabling them also revokes existing connections. Re-enabling the feature does not restore revoked grants; users must connect again.