← 🛡️ AI Security, Privacy & Governance
Advanced
RBAC, ABAC and Identity at Runtime for Agents
RBAC grants by role, ABAC grants by evaluating attributes of the user, the resource and the context. Both predate AI, and both break in a new way when an agent acts on someone's behalf: if the agent runs as a service account, every user inherits everything that account can reach. The 2026 answer is that the end user's own identity flows through to every tool call.
Unlock the full curriculum — ₹2,000 / $25every concept + every answer · 6 months · no auto-renew
RELATED CONCEPTS
LESSONS THAT TEACH THIS
PRACTICE THIS IN REAL QUESTIONS
RAG & Agent System DesignWhen is an agent the wrong answer? Argue against building one.→AI Security, Privacy & GovernanceWalk me through the OWASP LLM Top 10, which two risks would you prioritize for an enterprise agent deployment?→AI Security, Privacy & GovernanceWhat is 'excessive agency' in an agentic system, and what controls actually limit it?→AI Security, Privacy & GovernanceHow would you defend a RAG system against poisoned retrieved context and vector/embedding attacks?→RAG & Agent System DesignDesign a customer-support agent with order-status and returns tools. How do you keep it safe and useful?→AI Security, Privacy & GovernanceHow do tool poisoning and prompt injection apply to MCP servers and agentic AI, and how do you defend them?→