When you are not working with it, a dot does what OpenAI calls proactive research. In that mode it uses connected apps with tools restricted to read-only, so it cannot change anything in the account.
For actions, a dot follows Custom rules. Each rule sets one of four behaviours: Take action without asking, Take action if pre-approved, Ask before taking action, or Hand off to you. For anything that edits a campaign, choose Ask before taking action.
One limit to know about: OpenAI's MCP apps article says write actions through custom MCP apps are for Business, Enterprise, and Edu, so on Pro your dot may be able to read and not change.
AdPlug gives the dot two tools for campaign changes: a preview tool that returns the exact change without applying it, and an execute tool that applies it. Tell your dot to show you the preview before it executes anything. That covers campaign groups, campaigns, budgets, targeting, and ads in nine formats, including Thought Leader Ads. The free plan is view only; creating and editing campaigns needs a paid AdPlug plan.
OpenAI's own caution applies here too: a dot can make mistakes, including when following your rules, so check the details before you rely on a result. Report calls and executed changes are recorded in your AdPlug Usage and Audit Log.