One agent acts for hundreds of users across thousands of resources. A role or a coarse allowlist can’t express ‘this agent, for Alice, may read document 42.’ Authorization for agents has to be per-resource and relationship-aware.
RBAC Isn't Enough for AI Agents
calendar_today
June 8, 2026
domain
zuplo