Just like on your customers’ Platform (manual 58, section 2.1): your console’s manifest is prepared by your provider, but someone on your team with permission has to review and approve it before it actually arms the assistant — it never activates on its own.
Every action it can save (create customer, invite someone, save your brand) also starts off on its own, just like on the Platform — it’s turned on one at a time, with its own audience, from the same place where the manifest was approved.