Abilities, permissions and access
Three questions about a persona are answered separately.
Abilities are the tools the persona may call. In chat, it is offered only the tools on the chat allowlist, and that allowlist is searching its own knowledge. Ending the chat is offered on every turn, but as a signal that the conversation is over, not as a tool.
Permissions are what the persona itself may do. When it acts for you, it can do only what both of you may do: its own permissions, narrowed to yours, less a short list of actions that are never granted to a persona at all. Anything that changes something is treated as consequential and waits for your approval. You answer those requests from Settings.
Access is who in the workspace may use the persona.