You are organizing connected data sources for a team and must complete the planning steps...

Options A and D are correct because Connector authorization creates a security and data-governance boundary. Before connecting a service, the team must confirm that the provider is trusted and approved under organizational vendor-management requirements. It must also determine what data Claude could access, how that data is classified, and whether the proposed users have legitimate permission to use it.

Anthropic explains that Connectors can retrieve data and take actions in connected services. Claude inherits the user’s source-system permissions, while custom Connectors may connect to services that Anthropic has not verified. Anthropic therefore advises users to connect only to trusted servers, carefully review requested permissions, minimize unnecessary scopes, and remain aware that connected tools may read, modify, or delete data. These considerations directly support approved-vendor and data-authorization checks.

Training may be necessary before rollout, but it does not have to be completed before the authorization decision itself. Decommissioning legacy Connectors and migrating reports are implementation or lifecycle activities that ordinarily follow approval and transition planning. They do not replace the initial trust, classification, and permission assessment. Therefore, A and D are the required pre-authorization controls. See Anthropic’s Connector overview and custom Connector security guidance .

================