Agents
Agent configuration lifecycle and use.
Agent operation permissions are baseline tenant-member capabilities. Access to an existing Agent configuration additionally depends on its resource relationship.
| Resource relationship | Access |
|---|---|
| Viewer | Read and use the Agent |
| Editor | Viewer access plus editing |
| Owner | Editor access plus deletion and sharing |
| Grant manager | Manage sharing; this is not a general content-editing role |
A tenant-administrator assignment does not make its holder the owner of every Agent. Sharing operations use the Authorization family.
Permissions
This family contains 6 permissions. “Baseline member” means every current tenant member already has the operation permission, including members with any system role. It does not bypass the resource checks described above. “Custom role” means the identifier can be selected when defining a custom role.
agent.configuration.create
Create an Agent configuration; the creator becomes its owner.
Create an Agent configuration; the creator becomes its owner.
| Property | Value |
|---|---|
| Scope | Selected tenant |
| Granted by | Baseline member |
| Custom role | Yes |
| Also implies | agent.configuration.list, agent.configuration.read |
agent.configuration.delete
Delete an Agent configuration owned by the caller.
Delete an Agent configuration owned by the caller.
| Property | Value |
|---|---|
| Scope | Selected tenant |
| Granted by | Baseline member |
| Custom role | Yes |
| Also implies | agent.configuration.list, agent.configuration.read, agent.configuration.update |
agent.configuration.list
List Agent configurations visible to the caller.
List Agent configurations visible to the caller.
| Property | Value |
|---|---|
| Scope | Selected tenant |
| Granted by | Baseline member |
| Custom role | Yes |
| Also implies | agent.configuration.read |
agent.configuration.read
Read an Agent configuration that the caller owns or can view.
Read an Agent configuration that the caller owns or can view.
| Property | Value |
|---|---|
| Scope | Selected tenant |
| Granted by | Baseline member |
| Custom role | Yes |
agent.configuration.update
Edit an Agent configuration with resource-level write access.
Edit an Agent configuration with resource-level write access.
| Property | Value |
|---|---|
| Scope | Selected tenant |
| Granted by | Baseline member |
| Custom role | Yes |
| Also implies | agent.configuration.list, agent.configuration.read |
agent.configuration.use
Use an accessible Agent configuration in an AI interaction.
Use an accessible Agent configuration in an AI interaction.
| Property | Value |
|---|---|
| Scope | Selected tenant |
| Granted by | Baseline member |
| Custom role | Yes |