The exact list appears once this provider is configured on this deployment. Whatever it turns out to be, a connection starts read only and a write waits for you.

What connecting takes

1. 1

   Sign in at the provider and pick the account.

2. 2

   Approve read access. Kenward never asks for permission to write during a connection.

3. 3

   Nothing from this source is copied into Kenward. Its actions are still there when you ask for them.

This source is in the catalog, which is what a workspace can be granted, not what works today.