One-time setup, by an Owner or Accountant. Staple Agents reads your organization's data only through its own Staple API credentials, so nobody there can sign in until they're saved. Only read scopes are needed.