CCAOF-D5.2 · Configuration & Knowledge Management12% of CCA-A9 min read

Managing Uploaded Knowledge & Connectors.

A Project's knowledge splits into two mechanisms that behave differently: uploads are a static snapshot a user manually maintains, and connectors are live links to external systems (Google Drive, Gmail, Calendar) built on MCP. Connectors are not one uniform capability - Gmail can only search, read, and draft (never send), while Calendar can create, update, and delete events outright, so the governance question is per-connector scope, not "is this connector on." Every connector action still requires the user's explicit approval before it executes - Calendar writes and deletes are not silent.

Loading your plan…
Mental modelThe trap is treating connectors as one undifferentiated "live access" capability.
Managing Uploaded Knowledge & Connectors, hero illustration featuring Loop mascot in a warm gallery scene.
Share
On this page
01 · Summary

TLDR

A Project's knowledge splits into two mechanisms that behave differently: uploads are a static snapshot a user manually maintains, and connectors are live links to external systems (Google Drive, Gmail, Calendar) built on MCP. Connectors are not one uniform capability - Gmail can only search, read, and draft (never send), while Calendar can create, update, and delete events outright, so the governance question is per-connector scope, not "is this connector on." Every connector action still requires the user's explicit approval before it executes - Calendar writes and deletes are not silent.

3 (Drive, Gmail, Calendar)
Connector types covered
CCAOF-D5
Exam domain
12%
Domain weight
None, draft only
Gmail send capability
Delete + RSVP
Calendar destructive actions
02 · The decision

What you are deciding

An uploaded file is a snapshot; a connector reads from the source when you ask. Choose by the freshness the task needs, check the source's time and your permissions, and connect only what the task requires.

Learner decision

Does this task need a snapshot or the live source, and have I checked how current and complete the material is?

03 · Definition

What it is

A Project's knowledge is whatever it draws on beyond the base model, and a business user configuring one is really doing two different jobs. The first is curating static knowledge: files uploaded directly, indexed and retrieved on demand, a snapshot that only changes when someone re-uploads it. The second is managing live connectors: links to external systems, Google Drive, Gmail, Google Calendar, and other apps through Anthropic's Connectors directory, built on the Model Context Protocol (MCP), that let Claude read current, real-time state rather than a snapshot from whenever it was uploaded.

Both feed the same conversation, but they fail differently. A stale upload gives a wrong answer until someone notices and re-uploads it, a predictable, self-contained failure. A connector's accuracy depends on two things at once: the connected account's actual current state, and the permission scope granted when it was enabled, an over-broad grant is a live, ongoing exposure, not a one-time mistake that surfaces once and gets fixed.

04 · By certification

How each certification frames it

CCA-A: How CCA-A tests uploaded knowledge and connectors

  • CCAOF-D5-O2 Manage uploaded knowledge and connectors (e.g., Google Drive, Gmail)

The Associate guide lists managing uploaded knowledge and connectors such as Google Drive and Gmail (PDF page 5, Domain 5). Expect scenarios where information goes stale, or where Claude cannot see something the user assumes it can.

Anthropic's Google Workspace connector article says Claude accesses data when you ask, retrieves the minimum needed, and mirrors your existing permissions. On Team and Enterprise plans an Owner must enable the connectors for the organization first.

05 · Mechanics

How it works

Uploads are the simpler half and are covered in depth on the Projects page, click "+" on the project's knowledge panel, upload a document, and Claude retrieves the relevant portion at query time via RAG once the knowledge base grows large, automatically, on every plan. See Study Next for the full mechanics; this page focuses on the connector half.

Connectors are discovered and enabled through Anthropic's Connectors directory, a one-click browsing experience at claude.ai's directory built on MCP, where a user clicks "Connect" to authenticate a remote service or "Install" for a desktop extension. Individually, a user toggles a connector on or off inside a chat via the "+" menu's Connectors option. For Team and Enterprise plans, an Owner or Primary Owner must first enable a connector at the organization level, under Organization settings, before individual members can use it at all, an individual employee cannot unilaterally enable an org-managed connector for themselves.

Per-connector capability is asymmetric, and the exam tests knowing the specific asymmetry, not just "connectors are live." The Gmail connector can search, read, and summarize email, and create drafts, but sending is disabled at the platform level: every email must still be sent manually from the actual Gmail account, and attachment content is unavailable, only metadata. The Google Calendar connector, by contrast, has real write power: it can create, update, and delete events, manage attendee lists, respond to invitations, and set up recurring meetings, deleting an event triggers an automatic cancellation notice to attendees. The Google Drive connector reads text content from supported file types (images embedded in documents are not processed) and, when code execution is enabled, can also save Claude-generated files back to Drive. Across every connector, Claude Help Center guidance is explicit: each action Claude takes on the user's behalf requires the user's explicit approval before it executes, this matters most for Calendar since creating, updating, and deleting events are real, externally visible actions, not just reads.

Governance runs on the same access-scoping principle regardless of which connector: Claude only accesses connected data when a specific question or action requires it, and retrieves the minimum information needed for that request, rather than pulling everything available up front. But scope still has to be set correctly at grant time, granting full mailbox access when only calendar visibility was needed is a governance gap even though it may work fine that day, the exam trap is treating "the connector exists and is enabled" as sufficient, when the actual objective is scoping and periodically reviewing what each connector was granted.

Managing Uploaded Knowledge & Connectors mechanics, painterly diagram featuring Loop mascot.
06 · Worked example

Worked example: a shipment sheet that changes every day

Authored teaching example, not a bank question.

A logistics coordinator wants to know which shipments are delayed. The status sheet is updated several times a day. Finance holds its cost data in a separate spreadsheet that the coordinator's account cannot open.

01
State the freshness need. The answer must reflect the sheet as of this morning, not last Monday's export.
02
Check the source time. Look at the sheet's last-modified time and the date of any uploaded copy. An upload is a snapshot from the moment it was taken.
03
Check permissions and coverage. A connector only reaches what your account can open. The finance spreadsheet has its own file-level permissions, so its data is outside what the connector can retrieve and the answer cannot include it. Do not rely on sheet protection to hide data inside a shared file, because Google says it is not a security measure.
04
Verify the evidence. Ask Claude which source and version it used, then compare a few rows with the live sheet.
05
Limit access. Enable only the connector the task needs, and keep sending or sharing actions behind approval.
OptionFreshnessMain risk
Uploaded exportAs of the export timeGoes stale without any warning
Connected sheetRetrieved when you askPermissions limit what Claude can see

The coordinator knows how current the answer is and what it could not see. Check afterwards that the stated source time meets the freshness need and that the answer says the finance spreadsheet was not accessible.

07 · Failure modes

How this decision goes wrong

Assuming a stale upload is current

Looks right: The file is in the chat, so Claude is working from the latest data.

Why it fails: An upload is a copy from a moment in time, and Claude has no way to know it changed afterwards.

Instead: Note the snapshot time, or use a connector when the task depends on current data.

Assuming connected access is complete

Looks right: The connector is on, so Claude sees the whole sheet.

Why it fails: Claude mirrors your existing permissions and retrieves only what the question needs, so material in files you cannot open, or that was not retrieved, may be missing.

Instead: Ask which items were retrieved and confirm coverage against the source for anything that matters.

Granting broader access than the task needs

Looks right: Turning on every connector saves time later.

Why it fails: Extra access widens what a mistake or a misdirected request can touch, and complicates review.

Instead: Enable only the connector the task needs, and keep sending or sharing actions behind approval.

08 · In production

Where you'll see it

Q3 Vendor Review Project

Vendor contracts are uploaded as static project knowledge (retrieved by clause on demand), while the Gmail connector pulls the latest vendor correspondence live and the Drive connector references a shared scorecard spreadsheet that changes weekly, each source managed and revoked independently.

Scheduling assistant built on the Calendar connector

Creates, updates, and RSVPs to meetings on a user's behalf within that user's own existing calendar permissions, the two-gate model (org enables, user authenticates) bounds what it can touch even though Calendar's own capability includes real deletion.

09 · Compare

Side-by-side

↔ scroll to compare
ConnectorCan read / searchCan create or modifyCan deleteWhat it explicitly cannot do
GmailSearch and read email (metadata only for attachments)Create draftsNoSend email, no matter what's confirmed in chat
Google CalendarView events and availabilityCreate, update, RSVP, set recurring meetingsYes, with automatic cancellation noticesNothing structurally, this is the most action-capable of the three
Google DriveRead text content of supported filesSave Claude-generated files back to Drive (requires code execution enabled)NoProcess images embedded inside documents
10 · When to use

Decision tree

01

Does the underlying source change over time (a mailbox, a shared calendar, a live spreadsheet)?

YesUse a live connector so Claude sees current state, not a snapshot from upload time.
NoA one-time upload as project knowledge is simpler to manage and just as accurate.
02

Is this connector being enabled for a Team or Enterprise organization rather than an individual account?

YesAn Owner or Primary Owner must enable it at the organization level first, under Organization settings, before any member can use it.
NoAn individual user can toggle it on directly in chat via the '+' > Connectors menu.
03

Could this connector, once enabled, take a destructive or externally visible action (e.g. deleting an event, sending on someone's behalf)?

YesVerify the actual capability before assuming, Calendar can delete and notify attendees; Gmail cannot send under any configuration, review the specific connector's real permission surface, not an assumption. Either way, that action still requires the user's explicit approval before Claude executes it.
NoLower-risk read/draft-only connectors like Gmail still need scope review, but carry no destructive-action exposure.
04

Was this connector's permission scope reviewed after it was first granted?

YesLow governance risk, scope matches current need.
NoRe-review it, an unreviewed, over-broad grant (e.g. full mailbox access when only calendar was needed) is a live governance gap even if nothing has gone wrong yet.
11 · Exam trap

The exam trap

The trap is treating connectors as one undifferentiated "live access" capability. Gmail and Calendar are both live connectors, but Gmail can never send email regardless of configuration while Calendar can delete events and notify attendees outright. A CCAO-F question is more likely to test whether you know to scope and periodically review a specific connector's real permissions than whether you know connectors exist at all.

Managing Uploaded Knowledge & Connectors exam trap, painterly cautionary scene featuring Loop mascot.
12 · On the exam

Question patterns

CCA-A practice questions

6 approved CCA-A questions for this topic. Tap an answer to check it, then read the rationale for every option.

Question 1 of 6 · D5Choose the best answer

A PM sets up a Project with both uploaded contract PDFs and a live Gmail connector for the same client relationship. What's the key functional difference between these two knowledge sources?

Practice this topic with CCA-A questions

13 · FAQ

Frequently asked

Showing 6 of 6 questions

14 · Sources

Sources and next steps

CCA-A exam guide: Domain 5, Configuration and Knowledge Management

Help someone pass

Share this concept.

One share is one less person stuck on the same question.

Last reviewed: ·Refresh cadence: monthly