Microsoft Foundry
Identity, knowledge RBAC, session durability, and deploy patterns for production agent apps.
Foundry 
Azure Agent Access: How Do You Scope an Agent's Permissions Safely?
Enterprise agent webapps need separate control planes for sign-in, agent access and knowledge entitlements. Entra app roles on the API enforce them.
Azure
Entra IDMicrosoft Foundry Foundry Azure Enterprise Agents: How Do Big Companies Secure AI Agents and Knowledge Access?
How to design folder-scoped knowledge access for enterprise agents so chat, library browse, downloads, and citation files share one entitlement model.
AzureEntra IDMicrosoft Foundry Foundry Azure Microsoft Foundry: How Do You Persist Agent Sessions Outside the Chat Shell?
Where conversation state should live when a browser shell wraps a platform agent, and why refresh and quit behavior is an architecture choice.
AzureMicrosoft Foundry Foundry Azure Agent Apps: Can a Public POC Become a Private MVP?
How to stage agent webapps from a public POC to a private MVP without pretending env files are a network design.
AzureMicrosoft Foundry
App Service Foundry Azure Agent Pilots: Should You Rank Use Cases Before Picking an Agent Topology?
Start an enterprise agent program from ranked use cases (orchestrator, single agent or tools), not from a menu of model endpoints.
AzureMicrosoft Foundry Foundry Azure Microsoft Foundry: Is Deploy as Web App Enough, or Do You Need a Backend Proxy?
Walk through a VNet-integrated container App Service pattern with secretless OBO, managed identity, and private egress to Foundry, Search, and storage.
AzureMicrosoft FoundryApp Service Foundry Agent Traceability: How Do You See Inside an AI Interaction for Audit?
Argue that activity timelines must reconcile Foundry traces, MCP knowledge searches, and UI tool-call counts, or reviewers will never trust the product.
Microsoft Foundry Foundry Azure Agent Shells: How Do You Feature-Toggle Agent Capabilities Across Environments?
Replace hard-coded agent catalogs with product feature flags plus per-agent overlay rows for scope, starters, export prefixes, and access arrays.
AzureMicrosoft Foundry Foundry Azure Foundry + private Search: Is Name or service not known a DNS problem or an auth problem?
Foundry tool listing fails with Name or service not known on a private Azure AI Search MCP? Check DNS and the VNet path first, then 403 and RBAC.
AzureMicrosoft Foundry Foundry Azure Foundry Agent Webapps: Cosmos or Azure SQL for Backend State, and When?
Split app-owned state from Foundry platform stores. Use Cosmos for document-shaped chat state and Azure SQL when app records need relational operations.
AzureMicrosoft FoundryApp Service Foundry 
GitHub Actions Agent Evals: Can a Score Block a Release?
Turn real agent conversations into a versioned Foundry evaluation set, gate releases on a pass rate, and catch regressions before users do.
Microsoft Foundry Foundry Foundry Hosted Agents Still Need a Front Door
Hosted agents move your agent's runtime into Foundry, not your front door. When to move off a prompt agent, and what your backend must still own.
Microsoft Foundry