The active or owner key is used to sign a transaction that authorizes apps that use steemconnectv2 to have specific permissions. The apps themselves do not use or know any of your keys.
You can always revoke the permissions by going to https://v2.steemconnect.com/dashboard or you can go directly to https://v2.steemconnect.com/apps/authorized.
thank you. So should my VA be able to then log in using only our Posting key? That's ultimately what I want.