A method implemented by one or more processors, the method comprising: receiving, from a vehicle computing device, input data in response to a spoken utterance received at an automated assistant interface of a vehicle computing device, wherein the vehicle computing device is located in a vehicle with a first user and a second user; determining, in furtherance of responding to the spoken utterance, whether an assistant invocation task was performed by the second user to overcome a restriction on access, by the first user, to restricted data that is otherwise accessible to the second user via the automated assistant, wherein the vehicle computing device causes the automated assistant to be invoked in response to the second user performing one or more assistant invocation tasks that include the assistant invocation task; when the assistant invocation task was not performed by the second user: causing, in response to determining that the assistant invocation task was not performed by the second user, the vehicle computing device to operate in furtherance of receiving, from the second user, authorization to render output that is based on the restricted data, wherein the second user provides authorization to render the output by performing a particular assistant invocation task of the one or more assistant invocation tasks, determining, subsequent to causing the vehicle computing device to operate in furtherance of receiving authorization to render the output, whether authorization was received from the second user, and when authorization is determined to have been received from the second user: causing the vehicle computing device to render the output that is based on the restricted data and the input data. receiving, from a vehicle computing device, input data in response to a spoken utterance received at an automated assistant interface of a vehicle computing device, wherein the vehicle computing device is located in a vehicle with a first user and a second user; determining, in furtherance of responding to the spoken utterance, whether an assistant invocation task was performed by the second user to overcome a restriction on access, by the first user, to restricted data that is otherwise accessible to the second user via the automated assistant, wherein the vehicle computing device causes the automated assistant to be invoked in response to the second user performing one or more assistant invocation tasks that include the assistant invocation task; when the assistant invocation task was not performed by the second user: causing, in response to determining that the assistant invocation task was not performed by the second user, the vehicle computing device to operate in furtherance of receiving, from the second user, authorization to render output that is based on the restricted data, wherein the second user provides authorization to render the output by performing a particular assistant invocation task of the one or more assistant invocation tasks, determining, subsequent to causing the vehicle computing device to operate in furtherance of receiving authorization to render the output, whether authorization was received from the second user, and when authorization is determined to have been received from the second user: causing the vehicle computing device to render the output that is based on the restricted data and the input data. causing, in response to determining that the assistant invocation task was not performed by the second user, the vehicle computing device to operate in furtherance of receiving, from the second user, authorization to render output that is based on the restricted data, wherein the second user provides authorization to render the output by performing a particular assistant invocation task of the one or more assistant invocation tasks, determining, subsequent to causing the vehicle computing device to operate in furtherance of receiving authorization to render the output, whether authorization was received from the second user, and when authorization is determined to have been received from the second user: causing the vehicle computing device to render the output that is based on the restricted data and the input data.