Hhurt-tomato
Confirmation dialog when running full-permission Actors
After launching Actor permissions last year, we're continuing to adopt least-privileged access and stricter defaults to improve security for both users and AI agents. We've seen growing adoption in the community and 70 of the top 100 Actors in Apify Store now use limited permissions. Thank you to everyone who reviewed and migrated their Actors.
Full permissions are meant for Actors that genuinely need broad access to perform admin-level tasks on your account, like managing other Actors, runs or accessing account-wide resources.
To make sure users understand what access they’re granting, starting May 4th, we're introducing a one-time confirmation step for new users of full-permission Actors. Your existing users are not affected, **this only applies to users who haven’t run the Actor yet. Once approved, the Actor runs as usual with no further prompts. Users get transparency, and Actors that legitimately need full permissions keep working smoothly after the initial approval.
What should you do?**
If your public Actor uses full permissions, consider whether it truly needs them. Most scraping, data extraction, and automation Actors work fine with limited permissions. Switching gives you:
- Higher Actor Quality Score
- Better visibility in Apify Store
- No friction for new users or AI agents
Migration guide: https://docs.apify.com/platform/actors/development/permissions/migration-guide
If your Actor genuinely needs full permissions, that's completely fine. Just know that new users will see the confirmation step before running it, so clearly communicating why it’s needed in the README can help with adoption. Any questions? let us know in 💻creators-and-apify
After launching Actor permissions last year, we're continuing to adopt least-privileged access and stricter defaults to improve security for both users and AI agents. We've seen growing adoption in the community and 70 of the top 100 Actors in Apify Store now use limited permissions. Thank you to everyone who reviewed and migrated their Actors.
Full permissions are meant for Actors that genuinely need broad access to perform admin-level tasks on your account, like managing other Actors, runs or accessing account-wide resources.
To make sure users understand what access they’re granting, starting May 4th, we're introducing a one-time confirmation step for new users of full-permission Actors. Your existing users are not affected, **this only applies to users who haven’t run the Actor yet. Once approved, the Actor runs as usual with no further prompts. Users get transparency, and Actors that legitimately need full permissions keep working smoothly after the initial approval.
What should you do?**
If your public Actor uses full permissions, consider whether it truly needs them. Most scraping, data extraction, and automation Actors work fine with limited permissions. Switching gives you:
- Higher Actor Quality Score
- Better visibility in Apify Store
- No friction for new users or AI agents
Migration guide: https://docs.apify.com/platform/actors/development/permissions/migration-guide
If your Actor genuinely needs full permissions, that's completely fine. Just know that new users will see the confirmation step before running it, so clearly communicating why it’s needed in the README can help with adoption. Any questions? let us know in 💻creators-and-apify
