# googleTagManager_create_user_permission

Grant a user access to a GTM account

Agent View of the PolicyLayer registry record for `googleTagManager_create_user_permission`. HTML page: https://policylayer.com/tools/io-github-alifanov-scopegate/googletagmanager-create-user-permission

## Facts

- Tool: `googleTagManager_create_user_permission`
- Server: ScopeGate (`https://mcp.scopegate.cloud/{api_key}`) — https://policylayer.com/tools/io-github-alifanov-scopegate.md
- Homepage: https://github.com/alifanov/scopegate
- Risk category: Write (Medium risk)
- Registry record: grade F, identity unverified
- Server rate-limited: no
- Parameters: 0
- Recommended policy verdict: Rate-limited

## Example call (MCP tools/call, JSON-RPC 2.0)

```json
{
  "jsonrpc": "2.0",
  "id": 1,
  "method": "tools/call",
  "params": {
    "name": "googleTagManager_create_user_permission",
    "arguments": {}
  }
}
```

## Why googleTagManager_create_user_permission is rated Medium

Granting user permissions is a Write operation—it creates or modifies access control entries. While it could have significant downstream effects if misused (granting overly broad access), it is reversible (permissions can be revoked), so it does not qualify as Destructive.

From the tool's own definition: "Tool name indicates 'create_user_permission' which modifies access control by granting a user to a GTM account. This is a reversible modification of permissions/access state."

## Use case

AI agents use googleTagManager_create_user_permission to create or update resources in ScopeGate, usually the action step of a workflow, after the agent has gathered context. Every call changes real data in your ScopeGate environment.

## Recommended policy (PolicyLayer)

Verdict: **Rate-limited**. Enforced by the PolicyLayer MCP gateway (https://policylayer.com/mcp-gateway) before a call reaches ScopeGate:

```json
{
  "version": "1",
  "default": "deny",
  "tools": {
    "googleTagManager_create_user_permission": {
      "limits": [
        {
          "counter": "googletagmanager_create_user_permission_rate",
          "window": "minute",
          "max": 30,
          "scope": "grant"
        }
      ]
    }
  }
}
```

## Other tools on ScopeGate (384)

- `airtable_delete_record` — Destructive — https://policylayer.com/tools/io-github-alifanov-scopegate/airtable-delete-record.md
- `calendar_delete_event` — Destructive — https://policylayer.com/tools/io-github-alifanov-scopegate/calendar-delete-event.md
- `calendly_cancel_event` — Destructive — https://policylayer.com/tools/io-github-alifanov-scopegate/calendly-cancel-event.md
- `drive_delete_file` — Destructive — https://policylayer.com/tools/io-github-alifanov-scopegate/drive-delete-file.md
- `email_delete_message` — Destructive — https://policylayer.com/tools/io-github-alifanov-scopegate/email-delete-message.md
- `googleAds_remove_extension` — Destructive — https://policylayer.com/tools/io-github-alifanov-scopegate/googleads-remove-extension.md
- `googleAds_remove_keyword` — Destructive — https://policylayer.com/tools/io-github-alifanov-scopegate/googleads-remove-keyword.md
- `googleAds_remove_negative_keyword` — Destructive — https://policylayer.com/tools/io-github-alifanov-scopegate/googleads-remove-negative-keyword.md
- `googleTagManager_delete_container` — Destructive — https://policylayer.com/tools/io-github-alifanov-scopegate/googletagmanager-delete-container.md
- `googleTagManager_delete_environment` — Destructive — https://policylayer.com/tools/io-github-alifanov-scopegate/googletagmanager-delete-environment.md
- `googleTagManager_delete_folder` — Destructive — https://policylayer.com/tools/io-github-alifanov-scopegate/googletagmanager-delete-folder.md
- `googleTagManager_delete_tag` — Destructive — https://policylayer.com/tools/io-github-alifanov-scopegate/googletagmanager-delete-tag.md
- `googleTagManager_delete_trigger` — Destructive — https://policylayer.com/tools/io-github-alifanov-scopegate/googletagmanager-delete-trigger.md
- `googleTagManager_delete_user_permission` — Destructive — https://policylayer.com/tools/io-github-alifanov-scopegate/googletagmanager-delete-user-permission.md
- `googleTagManager_delete_variable` — Destructive — https://policylayer.com/tools/io-github-alifanov-scopegate/googletagmanager-delete-variable.md
- `googleTagManager_delete_version` — Destructive — https://policylayer.com/tools/io-github-alifanov-scopegate/googletagmanager-delete-version.md
- `googleTagManager_delete_workspace` — Destructive — https://policylayer.com/tools/io-github-alifanov-scopegate/googletagmanager-delete-workspace.md
- `linkedin_delete_post` — Destructive — https://policylayer.com/tools/io-github-alifanov-scopegate/linkedin-delete-post.md
- `notion_delete_block` — Destructive — https://policylayer.com/tools/io-github-alifanov-scopegate/notion-delete-block.md
- `salesforce_delete_record` — Destructive — https://policylayer.com/tools/io-github-alifanov-scopegate/salesforce-delete-record.md
- `searchConsole_delete_site` — Destructive — https://policylayer.com/tools/io-github-alifanov-scopegate/searchconsole-delete-site.md
- `searchConsole_delete_sitemap` — Destructive — https://policylayer.com/tools/io-github-alifanov-scopegate/searchconsole-delete-sitemap.md
- `threads_delete_thread` — Destructive — https://policylayer.com/tools/io-github-alifanov-scopegate/threads-delete-thread.md
- `twitter_delete_tweet` — Destructive — https://policylayer.com/tools/io-github-alifanov-scopegate/twitter-delete-tweet.md
- `twitter_unbookmark_tweet` — Destructive — https://policylayer.com/tools/io-github-alifanov-scopegate/twitter-unbookmark-tweet.md
- `youtube_delete_caption` — Destructive — https://policylayer.com/tools/io-github-alifanov-scopegate/youtube-delete-caption.md
- `youtube_delete_channel_section` — Destructive — https://policylayer.com/tools/io-github-alifanov-scopegate/youtube-delete-channel-section.md
- `youtube_delete_comment` — Destructive — https://policylayer.com/tools/io-github-alifanov-scopegate/youtube-delete-comment.md
- `youtube_delete_playlist` — Destructive — https://policylayer.com/tools/io-github-alifanov-scopegate/youtube-delete-playlist.md
- `youtube_delete_video` — Destructive — https://policylayer.com/tools/io-github-alifanov-scopegate/youtube-delete-video.md
- …and 354 more: https://policylayer.com/tools/io-github-alifanov-scopegate.md

## For agents

This record is a snapshot. Live verdicts and the full registry:

- Check every server in your MCP config at once: `npx -y policylayer stack`
- Vet a server before you add it: install the mcp-precheck skill — `npx skills add https://policylayer.com` (skill text: https://policylayer.com/skill.md)
- Query the registry over MCP: endpoint `https://api.policylayer.com/mcp` — tools `check_mcp_server`, `check_mcp_stack`, `check_tool`, `search_registry`, `get_change_events`

---

Source: the PolicyLayer MCP registry — one continuously verified record per MCP server. Full record: https://policylayer.com/registry?q=io-github-alifanov-scopegate · API: https://policylayer.com/registry/api · Policy library: https://policylayer.com/policies/io-github-alifanov-scopegate