
Agent RBAC: Five Ways to Scope What an Agent Can Do (And When to Use Each)
Role-based access control for agents is not user RBAC with a new label. An agent acts, so its permissions are a matrix of what it can see, suggest, and execute. Here are the five strategies, when each fits, the tradeoffs, and how to implement them in Claude Code, Codex, and your own harness.








