AI Gateway · Component · workspace-agent-access-governance
Workspace and agent access governance
What it does
Apply workspace/team/namespace roles, scoped access and coding-agent connector profiles.
Core pattern
Team role configuration + service access scopes
- Input
- Identity, policy and agent configuration
- Output
- Scoped access decisions and rendered client profiles
Key parameters
| Name | Type | Default | Values |
|---|---|---|---|
| operation | string | authorize | create_principal · update_policy · authorize · revoke · list |
| principal_type | string | agent | user · team · agent · api_client |
| roles | array | [] | — |
| allowed_models | array | [] | — |
| identity_provider | — | — | — |
Maturity and limits
Workspace, invitation, OIDC and profile services plus tests. Source paths were inspected statically; tests and live integrations were not executed. This rating describes implemented code, not production validation.
Credential-bearing configuration is excluded from this inventory. MIT; retain notices. Provider compatibility is configuration-dependent; metadata/privacy and optional payload plugins need review. Static inspection only. Variant-specific dependencies, limits and weaker maturity are recorded under variants; these implementations are alternatives, not one deployed system.
Used in pipelines
Industry tags
- HealthcareTransferable use
For hospital appointment and administrative service desks, use team role configuration followed by service access scopes.
- Government & public servicesTransferable use
Support “Define desk and department scopes” with team role configuration followed by service access scopes.
Skills pack
Contract scaffold and deterministic mock
Download · 12KBSHA-256 9abb43c87239d05acc3949619788b2acb73d2a0a9c394317157ff40d83d1b6bf
Related components
-
Governed provider and tool execution gateway
Request scope and budget checks + approval and idempotent calls
Working 1 pipeline -
Policy-controlled MCP gateway
Tool-call proxying + endpoint and environment policy limits
Working 1 pipeline -
Versioned gateway policy rollout
Policy validation and diff review + publication and rollback
Working 1 pipeline -
Prompt registry, cache and semantic policies
Prompt template management + intent and guardrail checks
Working 1 pipeline