1. Make sure individual users only see the datasets they have access to (add unique access across demo users) 2. Make sure agent only has read access (docs on how to configure this)