Skip to content

Commit 35ceaed

Browse files
update agent permission-based behavior description
1 parent d71e9c9 commit 35ceaed

File tree

1 file changed

+7
-7
lines changed

1 file changed

+7
-7
lines changed

articles/sre-agent/permissions.md

Lines changed: 7 additions & 7 deletions
Original file line numberDiff line numberDiff line change
@@ -4,15 +4,15 @@ description: Learn how to configure and manage permissions for Azure SRE Agent t
44
author: craigshoemaker
55
ms.author: cshoe
66
ms.topic: tutorial
7-
ms.date: 06/17/2025
7+
ms.date: 06/18/2025
88
ms.service: azure
99
---
1010

1111
# Configure permissions modes in Azure SRE Agent (preview)
1212

13-
Azure SRE Agent allows you to decide if you want the agent to act on its own (*autonomous mode*), or with your input (*review mode*).
13+
Azure SRE Agent allows you to decide if you want the agent to act on it's own (*autonomous mode*), or with your input (*review mode*).
1414

15-
As the agent works in review mode, it requires your approval for every action or write operation it performs. In autonomous mode, the agent performs these actions on your behalf, without stopping for explicit approval.
15+
When working in review mode, the agent requires your approval for every action or write operation it performs. In autonomous mode, the agent performs these actions on your behalf, without stopping for explicit approval.
1616

1717
## Permission requirements
1818

@@ -36,10 +36,10 @@ The following table summarizes how the agent behaves based on its operational mo
3636

3737
| Mode | Identity has permissions | Behavior |
3838
|---|---|---|
39-
| Review | Yes | ▪ Prompt user for approval<br>▪ If the user approves, perform action using the agent identity<br>▪ If the user declines, doesn't take any action and finishes the thread. |
40-
| Review | No | ▪ Prompt user for approval<br>▪ If user approves, provide 3 options (give agent permissions, use user permissions, give instructions for user to execute)<br>▪ If the user declines, doesn't take any action and finishes the thread |
41-
| Autonomous | Yes | ▪ Perform action using the agent identity |
42-
| Autonomous | No | ▪ Provides 3 options (give agent permissions, use user permissions, give instructions for user to execute) |
39+
| Review | Yes | If given approval from a human reviewer, the agent executes commands related to the action. |
40+
| Review | No | If given approval from a human reviewer, then the agent responds with a chance for the reviewer to grant the agent the necessary permissions, user the reviewer's permissions, or return manual instructions on how to achieve the action. |
41+
| Autonomous | Yes | The agent performs actions using the agent identity. |
42+
| Autonomous | No | The agent is forced to prompt for approval from a reviewer. If granted approval, then the agent responds with a chance for the reviewer to grant the agent the necessary permissions, user the reviewer's permissions, or return manual instructions on how to achieve the action. |
4343

4444
> [!NOTE]
4545
> You can't directly remove specific permissions from the agent. To restrict the agent's access, you must remove the entire resource group from the agent's scope.

0 commit comments

Comments
 (0)