Ask HN: Allow agents access to cloud files with least privilege?

Let's say I have a Google spreadsheet on my Drive that I want an agent like Muse to work on. Currently my options are: a) I can allow Muse to access my Drive b) Share the spreadsheet with edit privilege to anyone with link and give that link to Muse. Both of these are not least privilege access that I'm comfortable with. Ideally I should be able to share access to a file with an agent. Other options like webhooks, burner accounts, etc are too tedious to do regularly. Any obvious solution that I am missing?