You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: articles/sre-agent/permissions.md
+7-7Lines changed: 7 additions & 7 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -4,15 +4,15 @@ description: Learn how to configure and manage permissions for Azure SRE Agent t
4
4
author: craigshoemaker
5
5
ms.author: cshoe
6
6
ms.topic: tutorial
7
-
ms.date: 06/17/2025
7
+
ms.date: 06/18/2025
8
8
ms.service: azure
9
9
---
10
10
11
11
# Configure permissions modes in Azure SRE Agent (preview)
12
12
13
-
Azure SRE Agent allows you to decide if you want the agent to act on its own (*autonomous mode*), or with your input (*review mode*).
13
+
Azure SRE Agent allows you to decide if you want the agent to act on it's own (*autonomous mode*), or with your input (*review mode*).
14
14
15
-
As the agent works in review mode, it requires your approval for every action or write operation it performs. In autonomous mode, the agent performs these actions on your behalf, without stopping for explicit approval.
15
+
When working in review mode, the agent requires your approval for every action or write operation it performs. In autonomous mode, the agent performs these actions on your behalf, without stopping for explicit approval.
16
16
17
17
## Permission requirements
18
18
@@ -36,10 +36,10 @@ The following table summarizes how the agent behaves based on its operational mo
36
36
37
37
| Mode | Identity has permissions | Behavior |
38
38
|---|---|---|
39
-
| Review | Yes |▪ Prompt user for approval<br>▪ If the user approves, perform action using the agent identity<br>▪ If the user declines, doesn't take any action and finishes the thread. |
40
-
| Review | No |▪ Prompt user for approval<br>▪ If user approves, provide 3 options (give agent permissions, use user permissions, give instructions for user to execute)<br>▪ If the user declines, doesn't take any action and finishes the thread|
41
-
| Autonomous | Yes |▪ Perform action using the agent identity |
42
-
| Autonomous | No |▪ Provides 3 options (give agent permissions, use user permissions, give instructions for user to execute)|
39
+
| Review | Yes |If given approval from a human reviewer, the agent executes commands related to the action. |
40
+
| Review | No |If given approval from a human reviewer, then the agent responds with a chance for the reviewer to grant the agent the necessary permissions, user the reviewer's permissions, or return manual instructions on how to achieve the action.|
41
+
| Autonomous | Yes |The agent performs actions using the agent identity.|
42
+
| Autonomous | No |The agent is forced to prompt for approval from a reviewer. If granted approval, then the agent responds with a chance for the reviewer to grant the agent the necessary permissions, user the reviewer's permissions, or return manual instructions on how to achieve the action.|
43
43
44
44
> [!NOTE]
45
45
> You can't directly remove specific permissions from the agent. To restrict the agent's access, you must remove the entire resource group from the agent's scope.
0 commit comments