Per-bot permission controls for team members