Khalid ShamsPrincipal Solutions Architect

Learn AI · On the map · Operate · idea 33 of 44

Identity and Permissions

Making the AI act as the person using it, with exactly that person's permissions and no more.

A human-free studio of context trays, evidence shelves, instruments, a closed gate and service cabinets.⏸ Control boundary · Instruments represent software components
Read the concept diagram

In one line

Making the AI act as the person using it, with exactly that person's permissions and no more.

Picture it

A temp worker who gets your badge for the day, not the master key to the building.

Under the hood

The agent runs on behalf of the signed-in user (an on-behalf-of flow) with the platform enforcing access, not the prompt. The most common enterprise AI failure is an assistant returning data a user was never cleared for, through a service account given broad rights during a pilot.

Builds on

Leads to

On a guided path

Path 5: Running it safely, stop 3 of 11.

Marking "I get this" is self-reported and stays in this browser. The same mark shows on the map.