Skip to main content
Solved

Is it possible to restrict group ai agents access to only specific agent ids?

  • June 19, 2026
  • 1 reply
  • 15 views
M
Seasoned ⭐️⭐️⭐️

On a user.Group.yaml file we are able to set specific ids to certain capabilities, such as datasets:
 

      - datasetsAcl:

            actions:

                - READ

            scope:

                idScope:

                    ids:

                        - datasetId1

                        - datasetId2

 

Are we able to also do this for agents via agentsAcl run? I couldn’t find anything specifying it in the documentation and the assistant claimed it was not possible. I wanted to double check here if someone knew more about this.

Best answer by Mark Movh

Yes it is possible. I added the agents to the group in the admin access panel in the UI and did a dump of the group to see how it is done:

- agentsAcl:
    actions:
    - READ
    - RUN
    scope:
      agentExternalIdScope:
        externalIds:
        - GUID
        - GUID

 

    1 reply

    M
    Seasoned ⭐️⭐️⭐️
    • Mark Movh
    • Author
    • Seasoned ⭐️⭐️⭐️
    • Answer
    • June 22, 2026

    Yes it is possible. I added the agents to the group in the admin access panel in the UI and did a dump of the group to see how it is done:

    - agentsAcl:
        actions:
        - READ
        - RUN
        scope:
          agentExternalIdScope:
            externalIds:
            - GUID
            - GUID

     

      Terms & ConditionsAccessibility statement