A dataset read showed a service account, not the person who asked

An agent read a VSAM record and the audit showed a service account, not the person in the chat. Is that expected?

The read runs as the RACF identity on the API call, not as the person chatting. For a dataset published through [[product:ol-coreiq|OL CoreIQ]], that identity is the one the API is configured to present. Give the agent a credential that can read only the datasets you published. A closed write surface still blocks insert, update, and delete. Read-by-key is not the write path.