Pick who the agent is acting as, then ask for something. Every tool call is authorized against that identity's token.