Microsoft Foundry
Identity, knowledge RBAC, session durability, and deploy patterns for production agent apps.
Agent Access: How Do You Scope an Agent's Permissions Safely?
Why enterprise agent webapps need separate control planes for shell sign-in, agent catalog access, and knowledge corpus entitlements, and how Entra app roles on the API make that enforceable.
Enterprise Agents: How Do Big Companies Secure AI Agents and Knowledge Access?
How to design folder-scoped knowledge access for enterprise agents so chat, library browse, downloads, and citation PDFs share one entitlement model.
Microsoft Foundry: How Do You Persist Agent Sessions Outside the Chat Shell?
Where conversation state should live when a browser shell wraps a platform agent, and why refresh and quit behavior is an architecture choice.
Agent Apps: Can You Put a Fabric Data Agent in a Public Web App?
How to stage agent webapps from a public POC to a private MVP without pretending env files are a network design.
Agent Pilots: Has Anyone Wired Fabric Data Agent + Foundry for a Teams Chatbot?
Make the case that enterprise agent programs should start from ranked use cases (orchestrator vs single agent vs tools) instead of from a menu of model endpoints.
Microsoft Foundry: Is Deploy as Web App Enough, or Do You Need a Backend Proxy?
Walk through a VNet-integrated container App Service pattern with secretless OBO, managed identity, and private egress to Foundry, Search, and storage.
Agent Traceability: How Do You See Inside an AI Interaction for Audit?
Argue that activity timelines must reconcile Foundry traces, MCP knowledge searches, and UI tool-call counts, or support will never trust the product.
Agent Shells: How Do You Feature-Toggle Agent Capabilities Across Environments?
Replace hard-coded agent catalogs with product feature flags plus per-agent overlay rows for scope, starters, export prefixes, and access arrays.