RBAC Will Not Save Agent Security

Role-based access was built for long-lived persistent controls, not for autonomous actors that plan, retry, delegate, and call tools dynamically. Agents need task-scoped grants that expire quickly, constrain skills and tools, and produce an audit record for every decision.

This post is a summary of my recent in-depth article (free on Substack).

Roles Express Eligibility

A role can say an agent is generally eligible for invoice review, claims triage, or code maintenance. It cannot safely define what one execution may do.

Grants Define Authority

Each task needs a short-lived grant that defines permitted skills, tools, data, actions, routes, and expiry. The grant is the runtime boundary for the work.

Enforcement Makes It Real

A grant is only useful if services enforce it. Skill Services, Tool Services, route gateways, and release controls must validate each request and record what was allowed, denied, and why.

My book, “Agentic Mesh” is available from O’Reilly, Amazon, and wherever great books are sold.

If you liked this article then you may be interested in a few more things…

• More articles on agents on The Agentic Mesh Substack
• The Agentic Mesh Podcast channel on YouTube.
• The Agentic Mesh Podcast on Apple.
• The Agentic Mesh Podcast on Spotify.