Tag
Rbac
5 posts filed under Rbac.
The OBO Chain Through MCP: Passing User Identity from an Agent to Microsoft Graph
How an AI agent reaches Microsoft Graph as the signed-in user through MCP — why token passthrough fails, and how OBO and RBAC secure the chain.
Choosing the Right Agent Identity: Managed Identity, Entra Agent ID, OBO, or Service Principal
The first design decision for any Azure AI agent is which identity it uses — a decision matrix across managed identity, Entra Agent ID, and OBO.
Zero-Secrets Architecture on Azure: Managed Identity for AI Agents
The governance case for keyless Azure: why shared keys are a liability, how managed identity plus RBAC fixes it, and how teams enforce it.
Production Readiness: Auth, RBAC, and Deployment
JWT authentication, role-based access control, and user-scoped data isolation for a multi-agent system, plus a one-command Docker Compose startup.
Handling Authorization and Role-Based Access Control (RBAC)
Implement secure, permission-based authorization in Clean Architecture with custom attributes, dynamic policy providers, and JWT integration.
