Letting an AI assistant act on business records without giving it more power than the user