Access is protected by tenant isolation and a full audit trail. Connectors are read-only.