Fine-Grained Authorization

Fine-grained authorization is the enforcement of access controls at the level of individual resources, actions, or data fields — rather than coarse roles or broad permission sets. In agent systems, it means an agent can be permitted to read a specific customer's record but not modify it, or call a specific API endpoint but not others in the same service. Fine-grained authorization is essential for enforcing least privilege in complex, multi-step agent workflows.