Giving a system access is not the same as giving it permission to act. That distinction should be obvious.