AIEngineering (Cloud + IAM) AI Training

Permission Modes + Settings

Choose your comfort level — settings cascade through layers.

Ask Every Time
Default • Maximum control
  • Permission prompt for every write and command
  • Best for learning, unfamiliar repos
  • Production-adjacent work
Auto-Approve
acceptEdits • Best balance
  • Allow specific categories (reads, safe commands)
  • Best for daily dev in trusted repos
  • Still asks for risky operations
Bypass All
bypassPermissions • Use with caution
  • Executes everything without asking
  • Maximum speed, minimum guardrails
  • Isolated, low-risk environments only
Settings Hierarchy (highest wins)
Managed policy→CLI arguments→Local project (settings.local.json)→Shared project (settings.json)→User (~/.claude/settings.json)
A deny at any level cannot be overridden by a lower level. Start strict, relax selectively.