Microsoft Foundry
Identity, knowledge RBAC, session durability, and deploy patterns for production agent apps.
Foundry 
Azure Agent Access: How Do You Scope an Agent's Permissions Safely?
Why enterprise agent webapps need separate control planes for shell sign-in, agent catalog access, and knowledge corpus entitlements, and how Entra app roles on the API make that enforceable.
Azure
Entra IDMicrosoft Foundry Foundry Azure Enterprise Agents: How Do Big Companies Secure AI Agents and Knowledge Access?
How to design folder-scoped knowledge access for enterprise agents so chat, library browse, downloads, and citation files share one entitlement model.
AzureEntra IDMicrosoft Foundry Foundry Azure Microsoft Foundry: How Do You Persist Agent Sessions Outside the Chat Shell?
Where conversation state should live when a browser shell wraps a platform agent, and why refresh and quit behavior is an architecture choice.
AzureMicrosoft Foundry Foundry Azure Agent Apps: Can a Public POC Become a Private MVP?
How to stage agent webapps from a public POC to a private MVP without pretending env files are a network design.
AzureMicrosoft Foundry
App Service Foundry Azure Agent Pilots: Should You Rank Use Cases Before Picking an Agent Topology?
Make the case that enterprise agent programs should start from ranked use cases (orchestrator vs single agent vs tools) instead of from a menu of model endpoints.
AzureMicrosoft Foundry Foundry Azure Microsoft Foundry: Is Deploy as Web App Enough, or Do You Need a Backend Proxy?
Walk through a VNet-integrated container App Service pattern with secretless OBO, managed identity, and private egress to Foundry, Search, and storage.
AzureMicrosoft FoundryApp Service Foundry Agent Traceability: How Do You See Inside an AI Interaction for Audit?
Argue that activity timelines must reconcile Foundry traces, MCP knowledge searches, and UI tool-call counts, or reviewers will never trust the product.
Microsoft Foundry Foundry Azure Agent Shells: How Do You Feature-Toggle Agent Capabilities Across Environments?
Replace hard-coded agent catalogs with product feature flags plus per-agent overlay rows for scope, starters, export prefixes, and access arrays.
AzureMicrosoft Foundry Foundry Azure Foundry + private Search: Is Name or service not known a DNS problem or an auth problem?
When Foundry agent tool enumeration fails with Name or service not known against private Azure AI Search MCP, treat it as DNS and VNet path first, then chase 403 and RBAC.
AzureMicrosoft Foundry Foundry Azure Foundry Agent Webapps: Cosmos or Azure SQL for Backend State, and When?
Teach the Foundry agent webapp backend store decision. Split app-owned state from Foundry platform stores. Prefer Cosmos for document chat bags; prefer Azure SQL + EF Core when app-owned records need relational ops behind a frozen HTTP API.
AzureMicrosoft FoundryApp Service