iam.md Claude Code Docs, 2026-01-11 00:06 UTC → 2026-01-11 03:31 UTC

61Claude Code uses a tiered permission system to balance power and safety:61Claude Code uses a tiered permission system to balance power and safety:

62 62 

63| Tool Type | Example | Approval Required | "Yes, don't ask again" Behavior |63| Tool Type | Example | Approval Required | "Yes, don't ask again" Behavior |

64| :---------------- | :------------------- | :---------------- | :-------------------------------------------- |64| :---------------- | :--------------- | :---------------- | :-------------------------------------------- |

65| Read-only | File reads, LS, Grep | No | N/A |65| Read-only | File reads, Grep | No | N/A |

66| Bash Commands | Shell execution | Yes | Permanently per project directory and command |66| Bash Commands | Shell execution | Yes | Permanently per project directory and command |

67| File Modification | Edit/write files | Yes | Until session end |67| File Modification | Edit/write files | Yes | Until session end |

68 68 

141 141 

142**Read & Edit**142**Read & Edit**

143 143 

144`Edit` rules apply to all built-in tools that edit files. Claude will make a best-effort attempt to apply `Read` rules to all built-in tools that read files like Grep, Glob, and LS.144`Edit` rules apply to all built-in tools that edit files. Claude will make a best-effort attempt to apply `Read` rules to all built-in tools that read files like Grep and Glob.

145 145 

146Read & Edit rules both follow the [gitignore](https://git-scm.com/docs/gitignore) specification with four distinct pattern types:146Read & Edit rules both follow the [gitignore](https://git-scm.com/docs/gitignore) specification with four distinct pattern types:

147 147