Microsoft Foundry Agent Governance: How OBO, RBAC, and Approval Boundaries Work

·1 views

Microsoft's Foundry platform requires a structured permission model to govern AI agents acting on behalf of users or autonomously in the background. The framework distinguishes three runtime identity types: On-Behalf-Of (OBO) for user-context tasks like reading emails, Agent Identity for background jobs writing to Azure Storage, and dedicated write identities for high-impact actions such as sending emails or updating CRM records. A shared service principal can technically handle all three flows but risks blurring permission boundaries, making separate identity assignments the recommended approach. Developers are advised to define a permission ledger before configuring tools, recording six fields per action: principal, resource, action, scope, approval, and audit trail. The article also warns that mismatched authentication support in tools can cause agents to work in development but return 403 errors after publication, highlighting the need to verify tool documentation early.

Read the full story at DEV Community

This is an AI-generated summary. ShortSingh links to the original source for the complete article.

Discussion (0)

Developer Builds Multilingual English Practice Voice Agent for Indian Users

A developer created SpeakEasy AI, a voice-based AI assistant designed to help Indian users practice English through natural spoken conversations. Built as part of the Murf AI Voice for Bharat Challenge, the tool supports English, Hindi, and Hinglish to accommodate users with varying levels of English confidence. The system uses Python, LiveKit Agents, Murf AI for voice generation, and a FastAPI and Next.js stack, combining speech-to-text, text-to-speech, and LLM-based conversation. A conversational routing feature allows the main agent to redirect users to specialist agents, such as a dedicated maths practice assistant. The project also includes a basic call analytics dashboard and is planned for further development with improved memory, more specialist agents, and expanded multilingual support.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

Salesforce Admin Exam Guide: Security Models, Flow Automation, and Data Architecture

The Salesforce Certified Administrator exam tests candidates on translating business requirements into declarative platform architecture rather than rote feature memorisation. Salesforce employs a multi-layered security model spanning organisation, object, field, and record levels, where Organisation-Wide Defaults set the most restrictive baseline and sharing rules can only expand access, never restrict it. With Process Builder and Workflow Rules now deprecated, Salesforce Flow has become the primary automation tool, offering before-save and after-save execution paths suited to different use cases. Schema design knowledge is also critical, particularly distinguishing Master-Detail relationships — which support roll-up summaries and cascade deletions — from loosely coupled Lookup relationships. Exam strategy favours native declarative solutions, elimination of security anti-patterns, and careful time management across 60 questions in 105 minutes.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

Graph Theory in C#: BFS, DFS, and Real-World Problem Solving Explained

A technical tutorial published on DEV Community demonstrates how to apply graph theory concepts in C# to solve practical problems such as resolving nested role-based permissions. The article covers core vocabulary, including the distinction between directed and undirected graphs, which the author identifies as the most common source of silent bugs in hand-written graph code. It walks through implementing a generic Graph class using a dictionary of HashSets to prevent duplicate edges and ensure efficient traversal. Breadth-first search (BFS) and depth-first search (DFS) are both explained with working C# code, highlighting key implementation details like when to mark nodes as visited. The guide also addresses finding all connected components by iterating over unvisited nodes and launching fresh traversals from each.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

PawSense AI Uses Google Gemini to Analyze Dog Photos and Generate Canine Profiles

A developer has built PawSense AI, a full-stack web application submitted for DEV Community's Weekend Challenge: Dog Days Edition. The app allows users to upload a dog photo or use a webcam, after which Google Gemini's multimodal vision analyzes the image to produce a detailed canine profile. Features include breed identification, personality archetypes, a simulated 'dog thoughts' translator with text-to-speech, a personalized daily care schedule, and a downloadable ID card called a PawPort. The frontend is built with React 19 and TypeScript, while a Node.js and Express backend handles communication with the Gemini API. The application is live on Google AI Studio and uses IndexedDB for persistent client-side storage of scanned dog profiles.

0 comments Read more at DEV Community