Only what you grant, with every action logged and reversible. The Trust Center documents the rest.