First: can is not the same as may.
A connected system may make an action technically possible. A credential may make the action executable. Neither automatically gives ELEV8 permission to do it.
ELEV8's authority model separates technical capability, access, credentials, policy, approval, and actual delegated authority.
Can does not mean may.
Observe
Read or inspect where authorized
Recommend
Suggest an action
Prepare
Draft or stage the action
Approval
Human gate where policy requires it
Execute
Carry out the approved action
