Access Control

Ask about this topic

Overview

Access control determines which users, services, or AI agents may perform which operations on which data, supporting security, privacy, and accountability. Traditional approaches use role-based and attribute-based access control, policy languages such as Rego and Cedar, and formal analysis or testing to specify and verify permissions. Agentic systems add runtime checks for tool calls, delegation and revocation, information-flow tracking, and least-privilege scopes across workflows; benchmarks increasingly measure both policy compliance and task utility. A central challenge is enforcing authorization as context and authority change without leakage or privilege escalation, while avoiding excessive denials, latency, and loss of useful autonomy.

Latest papers

CardsList

71 papers10 papers in the last four weeks, up 11% on the four weeks before. 0.1% of all new papers.

  1. Governed MCP: Kernel-Level Tool Governance for AI Agents via Logit-Based Safety Primitives

    Apr 18, 2026Daeyeon SonMCP SecurityAI Agent Security

    Independent Researcher · Republic of Korea

  2. SpanKey: Dynamic Key Space Conditioning for Neural Network Access Control

    Apr 14, 2026WenBin YanAccess Control

    University of Colorado Boulder

  3. Intelligent Approval of Access Control Flow in Office Automation Systems via Relational Modeling

    Apr 13, 2026Dugang Liu, Zulong Chen, Chuanfei Xu +3Access ControlWorkflow Automation

    College of Computer Science and Software Engineering, Shenzhen University Shenzhen, China · Alibaba Group Holding Limited Hangzhou, China · Guangdong Laboratory of Artificial Intelligence and Digital Economy (SZ) Shenzhen, China +1

  4. APEX: Agent Payment Execution with Policy for Autonomous Agent API Access

    Apr 2, 2026Mohd Safwan Uddin, Mohammed Mouzam, Mohammed Imran +1Agentic CommerceTool Access Control for LLM Agents

  5. Prose2Policy (P2P): A Practical LLM Pipeline for Translating Natural-Language Access Policies into Executable Rego

    Mar 16, 2026Vatsal Gupta, Darshan SreenivasamurthyAccess ControlLLM-Based Program Synthesis

    Apple Cupertino, California, USA

  6. Generation of Human Comprehensible Access Control Policies from Audit Logs

    Mar 15, 2026Gautam Kumar, Ravi Sundaram, Shamik SuralAccess ControlText Generation

    Indian Institute of Technology Kharagpur, India · Northeastern University, Boston, USA

  7. The Bureaucracy of Speed: Structural Equivalence Between Memory Consistency Models and Multi-Agent Authorization Revocation

    Mar 10, 2026Vladyslav ParakhinAccess ControlTool Access Control for LLM Agents

    Senior Data Engineer, Okta

  8. Axis-Aligned Semantics for ODRL: Resolving Dimensional Ambiguity in Policy Constraints

    Feb 23, 2026Daham Mustafa, Diego Collarana, Sabrina Kirrane +5Policy EvaluationAccess Control

    RWTH Aachen University, Aachen, Germany · Fraunhofer FIT, Sankt Augustin, Germany · Vienna University of Economics and Business (WU), Vienna, Austria +1

  9. MiniScope: Authorizing Agents with Least-Privilege Permissions

    Dec 11, 2025Jinhao Zhu, Xiao Huang, Kevin Tseng +4Tool Access Control for LLM AgentsAI Agent Security

    UC Berkeley · IBM Research

  10. JEEVHITAA -- An HCAI Ecosystem to Support Collective Care

    Dec 6, 2025Shyama Sastha Krishnamoorthy Srinivasan, Harsh Pala, Mohan Kumar +1HealthcareClinical Decision Support

    IIIT-Delhi New Delhi, India · RIT, NY Rochester, New York, US

  11. Neurosymbolic Characterization for Reliable Access Control Policy Analysis

    Oct 23, 2025Adarsh Vatsa, Bethel Hall, William EiersNeuro-Symbolic ReasoningAccess Control

    Stevens Institute of Technology